CVE-2024-39325
Medium
Description
aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15 fix this issue.
SeverityMedium
CVSS5.3
Exploit probability—
Product
Aimeos Frontend Controller
PublishedJul 2, 2024
First seenJul 2, 2024
Weakness typeCWE-841CWE-841
How to fix
Update
- aimeos aimeos_frontend_controller2020.10.15, 2021.10.8, 2022.10.8, 2023.10.9 or later
- aimeos/ai-controller-frontend2023.10.9, 2022.10.8, 2021.10.8, 2020.10.15 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aimeos aimeos_frontend_controller | v < 2020.10.15, 2021.04.1 ≤ v < 2021.10.8, 2022.04.1 ≤ v < 2022.10.8, 2023.04.1 ≤ v < 2023.10.9, 2024.04.1 | 2020.10.15, 2021.10.8, 2022.10.8, 2023.10.9 |
| aimeos/ai-controller-frontendPackagist | 2023.04.1 ≤ v < 2023.10.9, 2022.04.1 ≤ v < 2022.10.8, 2021.04.1 ≤ v < 2021.10.8, v < 2020.10.15 | 2023.10.9, 2022.10.8, 2021.10.8, 2020.10.15 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.