Description (CNA)
ai-client-html is an Aimeos e-commerce HTML client component. Debug information revealed sensitive information from environment variables in error log. This issue has been patched in versions 2024.04.7, 2023.10.15, 2022.10.13 and 2021.10.22.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| aimeos / ai-client-html | affected >= 2024.04.1, < 2024.04.7; affected >= 2023.04.1, < 2023.10.15; affected >= 2022.04.1, < 2022.10.13; affected >= 2021.10.1, < 2021.10.22 |
CWE
CWE-1295
References
- https://github.com/aimeos/ai-client-html/security/advisories/GHSA-ppm5-jv84-2xg2
- https://github.com/aimeos/ai-client-html/commit/bb389620ffc3cf4a2f29c11a1e5f512049e0c132
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.