Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2024-39325

aimeos/ai-controller-frontend doesn't reset payment status in basket

Description

aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15 fix this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

aimeos ai-controller-frontend

  • = 2024.04.1affected
  • >= 2023.04.1, < 2023.10.9affected
  • >= 2022.04.1, < 2022.10.8affected
  • >= 2021.04.1, < 2021.10.8affected
  • < 2020.10.15affected

References