Skip to content
OpenAdvisories
Medium · 5.3 CVE-2024-39325 EUVD-2024-2380GHSA-m9gv-6p22-qgmj

aimeos/ai-controller-frontend doesn't reset payment status in basket

Published Jul 2, 2024 · Updated Aug 2, 2024 · Assigned by GitHub_M

Description

aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15 fix this issue.

Affected products

VendorProductAffectedFixed
aimeos ai-controller-frontend = 2024.04.1, >= 2023.04.1, < 2023.10.9, >= 2022.04.1, < 2022.10.8, >= 2021.04.1, < 2021.10.8, < 2020.10.15 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist aimeos/ai-controller-frontend >= 2023.04.1, < 2023.10.9 2023.10.9 GHSA-m9gv-6p22-qgmj
Packagist aimeos/ai-controller-frontend >= 2022.04.1, < 2022.10.8 2022.10.8 GHSA-m9gv-6p22-qgmj
Packagist aimeos/ai-controller-frontend >= 2021.04.1, < 2021.10.8 2021.10.8 GHSA-m9gv-6p22-qgmj
Packagist aimeos/ai-controller-frontend < 2020.10.15 2020.10.15 GHSA-m9gv-6p22-qgmj

References