Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2024-38516

Aimeos HTML client may potentially reveal sensitive information in error log

Description

ai-client-html is an Aimeos e-commerce HTML client component. Debug information revealed sensitive information from environment variables in error log. This issue has been patched in versions 2024.04.7, 2023.10.15, 2022.10.13 and 2021.10.22.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

aimeos ai-client-html

  • >= 2024.04.1, < 2024.04.7affected
  • >= 2023.04.1, < 2023.10.15affected
  • >= 2022.04.1, < 2022.10.13affected
  • >= 2021.10.1, < 2021.10.22affected

References