CVE-2024-39325
- Source
- https://cve.org/CVERecord?id=CVE-2024-39325
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-39325.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2024-39325
- Aliases
- Published
- 2024-07-02T20:36:58Z
- Modified
- 2026-10-21T02:30:36Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N CVSS Calculator
- Summary
- aimeos/ai-controller-frontend doesn't reset payment status in basket
- Details
-
aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15 fix this issue.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-841" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/39xxx/CVE-2024-39325.json" }- References
-
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/39xxx/CVE-2024-39325.json
- https://github.com/aimeos/ai-controller-frontend/security/advisories/GHSA-m9gv-6p22-qgmj
- https://nvd.nist.gov/vuln/detail/CVE-2024-39325
- https://github.com/aimeos/ai-controller-frontend/commit/16b8837d2466e3665b3c826ce87934b01a847268
- https://github.com/aimeos/ai-controller-frontend/commit/24a57001e56759d1582d2a0080fc1ca3ba328630
- https://github.com/aimeos/ai-controller-frontend/commit/28549808e0f6432a34cd3fb95556deeb86ca276d
- https://github.com/aimeos/ai-controller-frontend/commit/b1960c0b6e5ee93111a5360c9ce949b3e7528cf7
- https://github.com/aimeos/ai-controller-frontend/commit/dafa072783bb692f111ed092d9d2932c113eb855
Affected packages
Git / github.com/aimeos/ai-controller-frontend
Affected ranges
- Type
- GIT
- Repo
- https://github.com/aimeos/ai-controller-frontend
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixedIntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixedFixedFixedFixedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "cpe": "cpe:2.3:a:aimeos:aimeos_frontend_controller:*:*:*:*:*:*:*:*", "range": [ { "introduced": "0" }, { "fixed": "2020.10.15" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:aimeos:aimeos_frontend_controller:*:*:*:*:*:*:*:*", "range": [ { "introduced": "2021.04.1" }, { "fixed": "2021.10.8" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:aimeos:aimeos_frontend_controller:*:*:*:*:*:*:*:*", "range": [ { "introduced": "2022.04.1" }, { "fixed": "2022.10.8" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:aimeos:aimeos_frontend_controller:*:*:*:*:*:*:*:*", "range": [ { "introduced": "2023.04.1" }, { "fixed": "2023.10.9" } ], "source": "CPE_RANGE" }, { "cpe": "cpe:2.3:a:aimeos:aimeos_frontend_controller:2024.04.1:*:*:*:*:*:*:*", "range": [ { "introduced": "2024.04.1" }, { "last_affected": "2024.04.1" } ], "source": "CPE_STRING" }, { "range": [ { "fixed": "16b8837d2466e3665b3c826ce87934b01a847268" } ], "source": "REFERENCES_COMMIT" }, { "range": [ { "fixed": "24a57001e56759d1582d2a0080fc1ca3ba328630" } ], "source": "REFERENCES_COMMIT" }, { "range": [ { "fixed": "28549808e0f6432a34cd3fb95556deeb86ca276d" } ], "source": "REFERENCES_COMMIT" }, { "range": [ { "fixed": "b1960c0b6e5ee93111a5360c9ce949b3e7528cf7" } ], "source": "REFERENCES_COMMIT" }, { "range": [ { "fixed": "dafa072783bb692f111ed092d9d2932c113eb855" } ], "source": "REFERENCES_COMMIT" } ] }
Affected versions
2016.*
2016.07.1
2017.*
2017.01.1
2017.07.1
2018.*
2018.01.1
2019.*
2019.04.1
2020.*
2020.10.1
2020.10.10
2020.10.11
2020.10.13
2020.10.14
2020.10.2
2020.10.3
2020.10.4
2020.10.5
2020.10.6
2020.10.7
2020.10.8
2020.10.9
2021.*
2021.10.1
2021.10.2
2021.10.3
2021.10.4
2021.10.5
2021.10.6
2021.10.7
2022.*
2022.10.1
2022.10.2
2022.10.3
2022.10.4
2022.10.5
2022.10.6
2022.10.7
2023.*
2023.10.1
2023.10.2
2023.10.3
2023.10.4
2023.10.5
2023.10.6
2023.10.7
2023.10.8
2024.*
2024.04.1
= 2024.*
= 2024.04.1