{"action":"Upgrade oro/calendar-bundle to 5.0.7 or later.","affected":[{"introduced":"4.2.0","last_affected":"4.2.6"},{"fixed":"5.0.7","introduced":"5.0.0"},{"fixed":"5.1.1","introduced":"5.1.0"}],"component":"oro/calendar-bundle","cve_ids":["CVE-2023-32062"],"ecosystem":"Packagist","epss":0.00538,"exploited":false,"fixed_versions":["5.0.7","5.1.1"],"ghsa_id":"GHSA-x2xm-p6vq-482g","id":"tcs_01M5KFAJVDM545HV1XVXQASTP5","modified_at":"2026-09-10T03:50:08.721819113Z","published_at":"2023-11-27T23:29:11Z","references":["https://osv.dev/vulnerability/GHSA-x2xm-p6vq-482g","https://github.com/oroinc/crm/security/advisories/GHSA-x2xm-p6vq-482g","https://nvd.nist.gov/vuln/detail/CVE-2023-32062","https://github.com/oroinc/OroCalendarBundle/commit/460a8ffb63b10c76f2fa26d53512164851c4909b","https://github.com/oroinc/OroCalendarBundle/commit/5f4734aa02088191c1c1d90ac0909f48610fe531","https://github.com/oroinc/crm"],"severity":{"label":"medium","score":5},"sources":[{"source":"osv","source_id":"GHSA-x2xm-p6vq-482g","url":"https://osv.dev/vulnerability/GHSA-x2xm-p6vq-482g"}],"summary":"OroCalendarBundle has incorrect system calendar events visibility"}