GitHub Advisoryadvisory · Packagist

GHSA-m9gv-6p22-qgmj ai-controller-frontend payment status in basket isn't reset

MEDIUM Published 2024-07-05 Modified 2024-07-05 Official page ↗
Aliases
CVE-2024-39325
Ecosystem
Packagist
Packages
aimeos/ai-controller-frontend
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-841
Reviewed
2024-07-05

Affected packages

• Packagist aimeos/ai-controller-frontend: >= 2023.04.1, < 2023.10.9 → fixed in 2023.10.9 • Packagist aimeos/ai-controller-frontend: >= 2022.04.1, < 2022.10.8 → fixed in 2022.10.8 • Packagist aimeos/ai-controller-frontend: >= 2021.04.1, < 2021.10.8 → fixed in 2021.10.8 • Packagist aimeos/ai-controller-frontend: < 2020.10.15 → fixed in 2020.10.15

Description

Impact Payment status in basket isn't reset

Related

Alias · CVE (1)

  • CVE-2024-39325 aimeos/ai-controller-frontend is the Aimeos frontend controller. vulnerability

Weakness · CWE (1)

  • CWE-841 Improper Enforcement of Behavioral Workflow weakness

References