Aimeos Frontend Controller (ai-controller-frontend) 2024.04.1
Approved changes feed: RSS · Atom
cpe:2.3:a:aimeos:aimeos_frontend_controller:2024.04.1:*:*:*:*:*:*:*
part: a version: 2024.04.1 update: *
| Vendor | Aimeos (b4d165b0-ea44-5b6c-9214-9c2f903ffab7) |
|---|---|
| Product | Aimeos Frontend Controller (e7167585-96b5-5900-91e6-baa1f4874b02) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:composer/aimeos/ai-controller-frontend |
purl2cpe | 2026-06-01 10:11:15.303111 |
pkg:github/aimeos/ai-controller-frontend |
purl2cpe | 2026-06-01 10:11:15.303113 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-39325 |
vulnerable | 2026-06-08 06:41:49.076647 |
aimeos/ai-controller-frontend doesn't reset payment status in basket
MEDIUM (5.3)
aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15 fix this issue.
Published: 2024-07-02T20:36:58.336Z
Updated: 2024-08-02T04:19:20.638Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39319 |
vulnerable | 2026-06-08 06:41:49.064774 |
aimeos/ai-controller-frontend has IDOR vulnerability in account profile page
MEDIUM (5.3)
aimeos/ai-controller-frontend is the Aimeos frontend controller package for e-commerce projects. Prior to versions 2024.4.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, an insecure direct object reference allows an attacker to disable subscriptions and reviews of another customer. Versions 2024.4.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15 fix this issue.
Published: 2024-09-26T16:07:01.482Z
Updated: 2024-09-26T18:24:00.120Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.