CVE Vulnerabilities

CVE-2024-39325

Published: Jul 02, 2024 | Modified: Oct 15, 2024
CVSS 3.x
5.3
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesnt reset the payment status of a users basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15 fix this issue.

Affected Software

Name Vendor Start Version End Version
Aimeos_frontend_controller Aimeos * 2020.10.15 (excluding)
Aimeos_frontend_controller Aimeos 2021.04.1 (including) 2021.10.8 (excluding)
Aimeos_frontend_controller Aimeos 2022.04.1 (including) 2022.10.8 (excluding)
Aimeos_frontend_controller Aimeos 2023.04.1 (including) 2023.10.9 (excluding)
Aimeos_frontend_controller Aimeos 2024.04.1 (including) 2024.04.1 (including)

References