Skip to content
OpenAdvisories

Package · Packagist

aimeos/ai-client-html

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.8
    CVE-2024-38516

    Aimeos HTML client may potentially reveal sensitive information in error log

    ai-client-html is an Aimeos e-commerce HTML client component. Debug information revealed sensitive information from environment variables in error log. This issue has been patched in versions 2024.04.7, 2023.10.15, 2022.10.13 and 2021.10.22.

    aimeos ai-client-html aimeos/ai-client-html Packagist
  • Medium 5.3
    CVE-2024-37296

    Aimeos HTML client vulnerable to digital products download without proper payment status check

    The Aimeos HTML client provides Aimeos HTML components for e-commerce projects. Starting in version 2020.04.1 and prior to versions 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14, and 2024.04.5, digital downloads sold in online shops can be downloaded without…

    aimeos ai-client-html aimeos/ai-client-html Packagist