Skip to content
OpenAdvisories

Package · Packagist

aimeos/ai-controller-frontend

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.3
    CVE-2024-39319

    aimeos/ai-controller-frontend has IDOR vulnerability in account profile page

    aimeos/ai-controller-frontend is the Aimeos frontend controller package for e-commerce projects. Prior to versions 2024.4.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, an insecure direct object reference allows an attacker to disable subscriptions and r…

    aimeos ai-controller-frontend aimeos/ai-controller-frontend Packagist
  • Medium 5.3
    CVE-2024-39325

    aimeos/ai-controller-frontend doesn't reset payment status in basket

    aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchas…

    aimeos ai-controller-frontend aimeos/ai-controller-frontend Packagist