p PatchFirst

PatchFirst · Latest vulnerabilities

aimeos/ai-client-html vulnerabilities

Vulnerabilities published for aimeos/ai-client-html in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 2

  1. CVE-2024-38516

    High · CVSS 8.8EPSS 0.51%Fix available

    Aimeos HTML client may potentially reveal sensitive information in error log

    ai-client-html is an Aimeos e-commerce HTML client component. Debug information revealed sensitive information from environment variables in error log. This issue has been patched in versions 2024.04.7, 2023.10.15, 2022.10.13 and 2021.10.22.

    aimeos/ai-client-html aimeos/ai-client-html aimeos/ai-client-html aimeos/ai-client-htmlPHP
    • Update to 2021.10.22
    • Update to 2022.10.13
    • Update to 2023.10.15
    • Update to 2024.04.7
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. CVE-2024-37296

    Medium · CVSS 5.3EPSS 0.55%Fix available

    Aimeos HTML client vulnerable to digital products download without proper payment status check

    The Aimeos HTML client provides Aimeos HTML components for e-commerce projects. Starting in version 2020.04.1 and prior to versions 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14, and 2024.04.5, digital downloads sold in online shops can be downloaded without valid payment, e.g. if the payment didn't succeed. Versions 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14, and 2024.04.5 fix this issue.

    aimeos/ai-client-html aimeos/ai-client-html aimeos/ai-client-html aimeos/ai-client-html aimeos/ai-client-htmlPHP
    • Update to 2020.10.27
    • Update to 2021.10.21
    • Update to 2022.10.12
    • Update to 2023.10.14
    • Update to 2024.04.5
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →