Approved changes feed: RSS · Atom

cpe:2.3:a:aimeos:ai-admin-jsonadm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAimeos (b4d165b0-ea44-5b6c-9214-9c2f903ffab7)
ProductAi Admin Jsonadm (506df021-7015-59da-8775-ce9933961d2a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-39322 vulnerable 2026-06-08 06:41:49.072206 aimeos/ai-admin-jsonadm improper access control vulnerability allows editors to remove required records
MEDIUM (5.5)
aimeos/ai-admin-jsonadm is the Aimeos e-commerce JSON API for administrative tasks. In versions prior to 2020.10.13, 2021.10.6, 2022.10.3, 2023.10.4, and 2024.4.2, improper access control allows editors to remove admin group and locale configuration in the Aimeos backend. Versions 2020.10.13, 2021.10.6, 2022.10.3, 2023.10.4, and 2024.4.2 contain a fix for the issue.
Published: 2024-07-02T20:19:01.919Z
Updated: 2024-08-02T04:19:20.705Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.