Ai Controller Frontend
Approved changes feed: RSS · Atom
cpe:2.3:a:aimeos_project:ai-controller-frontend:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Aimeos Project (9edbca46-9f6e-5d13-82fc-264ee10bffbd) |
|---|---|
| Product | Ai Controller Frontend (022199d6-8c21-5864-b4e8-a52e5902b006) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:composer/aimeos/ai-controller-frontend |
purl2cpe | 2026-06-01 10:13:26.029205 |
pkg:github/aimeos/ai-controller-frontend |
purl2cpe | 2026-06-01 10:13:26.029206 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-39322 |
vulnerable | 2026-06-08 06:41:49.072257 |
aimeos/ai-admin-jsonadm improper access control vulnerability allows editors to remove required records
MEDIUM (5.5)
aimeos/ai-admin-jsonadm is the Aimeos e-commerce JSON API for administrative tasks. In versions prior to 2020.10.13, 2021.10.6, 2022.10.3, 2023.10.4, and 2024.4.2, improper access control allows editors to remove admin group and locale configuration in the Aimeos backend. Versions 2020.10.13, 2021.10.6, 2022.10.3, 2023.10.4, and 2024.4.2 contain a fix for the issue.
Published: 2024-07-02T20:19:01.919Z
Updated: 2024-08-02T04:19:20.705Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39319 |
vulnerable | 2026-06-08 06:41:49.062537 |
aimeos/ai-controller-frontend has IDOR vulnerability in account profile page
MEDIUM (5.3)
aimeos/ai-controller-frontend is the Aimeos frontend controller package for e-commerce projects. Prior to versions 2024.4.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, an insecure direct object reference allows an attacker to disable subscriptions and reviews of another customer. Versions 2024.4.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15 fix this issue.
Published: 2024-09-26T16:07:01.482Z
Updated: 2024-09-26T18:24:00.120Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.