Skip to content
OpenAdvisories
High · 8.8 CVE-2024-38516 EUVD-2024-2124GHSA-ppm5-jv84-2xg2

Aimeos HTML client may potentially reveal sensitive information in error log

Published Jun 25, 2024 · Updated Aug 2, 2024 · Assigned by GitHub_M

Description

ai-client-html is an Aimeos e-commerce HTML client component. Debug information revealed sensitive information from environment variables in error log. This issue has been patched in versions 2024.04.7, 2023.10.15, 2022.10.13 and 2021.10.22.

Affected products

VendorProductAffectedFixed
aimeos ai-client-html >= 2024.04.1, < 2024.04.7, >= 2023.04.1, < 2023.10.15, >= 2022.04.1, < 2022.10.13, >= 2021.10.1, < 2021.10.22 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist aimeos/ai-client-html >= 2024.04.1, < 2024.04.7 2024.04.7 GHSA-ppm5-jv84-2xg2
Packagist aimeos/ai-client-html >= 2023.04.1, < 2023.10.15 2023.10.15 GHSA-ppm5-jv84-2xg2
Packagist aimeos/ai-client-html >= 2022.04.1, < 2022.10.13 2022.10.13 GHSA-ppm5-jv84-2xg2
Packagist aimeos/ai-client-html >= 2021.10.1, < 2021.10.22 2021.10.22 GHSA-ppm5-jv84-2xg2

References