← CVE Intelligence

CVE-2024-39325

aimeos/ai-controller-frontend doesn't reset payment status in basket PUBLISHED

Description (CNA)

aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15 fix this issue.

Affected (CNA)

Vendor / productVersions
aimeos / ai-controller-frontendaffected = 2024.04.1; affected >= 2023.04.1, < 2023.10.9; affected >= 2022.04.1, < 2022.10.8; affected >= 2021.04.1, < 2021.10.8; affected < 2020.10.15

CWE

CWE-841

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.