p PatchFirst

PatchFirst · Vulnerabilidades recientes

Vulnerabilidades de aimeos/ai-controller-frontend

Vulnerabilidades publicadas para aimeos/ai-controller-frontend en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.

RSS ↗ JSON ↗
Filtrar vulnerabilidades
Borrar filtros

Vulnerabilidades: 2

  1. CVE-2024-39319

    Media · CVSS 5.3EPSS 0,48%Corrección disponible

    aimeos/ai-controller-frontend has IDOR vulnerability in account profile page

    aimeos/ai-controller-frontend is the Aimeos frontend controller package for e-commerce projects. Prior to versions 2024.4.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, an insecure direct object reference allows an attacker to disable subscriptions and reviews of another customer. Versions 2024.4.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15 fix this issue.

    aimeos/ai-controller-frontend aimeos/ai-controller-frontend aimeos/ai-controller-frontend aimeos/ai-controller-frontend aimeos/ai-controller-frontendPHP
    • Actualiza a 2020.10.15
    • Actualiza a 2021.10.8
    • Actualiza a 2022.10.8
    • Actualiza a 2023.10.9
    • Actualiza a 2024.04.2
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

  2. CVE-2024-39325

    Media · CVSS 5.3EPSS 0,43%Corrección disponible

    aimeos/ai-controller-frontend doesn't reset payment status in basket

    aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15 fix this issue.

    aimeos/ai-controller-frontend aimeos/ai-controller-frontend aimeos/ai-controller-frontend aimeos/ai-controller-frontendPHP
    • Actualiza a 2020.10.15
    • Actualiza a 2021.10.8
    • Actualiza a 2022.10.8
    • Actualiza a 2023.10.9
    Publicación Actualización
    Aviso original 1 ↗Aviso original 2 ↗Aviso original 3 ↗

Comprueba tu servidor

Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.

Comprueba tu servidor →