{"action":"Upgrade oro/crm-call-bundle to 5.0.4 or later.","affected":[{"introduced":"4.2.0","last_affected":"4.2.5"},{"fixed":"5.0.4","introduced":"5.0.0"},{"fixed":"5.1.1","introduced":"5.1.0"}],"component":"oro/crm-call-bundle","cve_ids":["CVE-2023-32063"],"ecosystem":"Packagist","epss":0.00538,"exploited":false,"fixed_versions":["5.0.4","5.1.1"],"ghsa_id":"GHSA-897w-jv7j-6r7g","id":"tcs_01M5KEYVKVZZDX3FRYM8RBT0QV","modified_at":"2024-02-16T08:12:02.439609Z","published_at":"2023-11-27T23:29:31Z","references":["https://osv.dev/vulnerability/GHSA-897w-jv7j-6r7g","https://github.com/oroinc/crm/security/advisories/GHSA-897w-jv7j-6r7g","https://nvd.nist.gov/vuln/detail/CVE-2023-32063","https://github.com/oroinc/OroCRMCallBundle/commit/456b1dda7762abf4ff59eafffaa70ab7f09d1c85","https://github.com/oroinc/OroCRMCallBundle/commit/9a41dff459bb4aff864175ca883d553ac0954950","https://github.com/oroinc/crm"],"severity":{"label":"medium","score":5},"sources":[{"source":"osv","source_id":"GHSA-897w-jv7j-6r7g","url":"https://osv.dev/vulnerability/GHSA-897w-jv7j-6r7g"}],"summary":"OroCRMCallBundle has incorrect call view page visibility"}