oro/customer-portal

Latest 7.0.4

Packagist

88%

Total Score

Maintainer Stability

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Repo issue activity

There were no new or closed issues or pull requests in the last month, which is a modest maintenance-visibility concern despite recent commit activity.

Repo tooling

Composer build tooling is present, but no security-scanning tools were detected, leaving a repository hygiene gap.

Security policy

The repository has no published security policy, making vulnerability reporting and response expectations less transparent.

Vulnerabilities

Title	Versions	Severity
CVE-2023-48296 oro/customer-portal is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 4.1.0 - 4.1.13, 4.2.0 - 4.2.10, 5.0.0 - 5.0.11 and 5.1.0 - 5.1.3.	4.1.0 - 4.1.134.2.0 - 4.2.105.0.0 - 5.0.11 +1 more	Medium
CVE-2023-32064 oro/customer-portal is vulnerable to Improper Access Control in versions 4.2.0 - 4.2.8, 5.0.0 - 5.0.11 and 5.1.0 - 5.1.1.	4.2.0 - 4.2.85.0.0 - 5.0.115.1.0 - 5.1.1	Medium

Package versions

Maintainers

Oro, Inc

Direct Dependencies

Dependency	Last Release	Score
oro/commerce Version 7.0.*	—	—
oro/platform Version 7.0.*	—	—
oro/marketing Version 7.0.*	—	—
oro/calendar-bundle Version 7.0.*	—	—
oro/platform-serialised-fields Version 7.0.*	—	—