GHSA-8fj2-587w-5whrMediumCVSS 5.5

aimeos/ai-admin-jsonadm improper access control vulnerability allows editors to remove required records

Published
July 2, 2024
Last Modified
July 5, 2024

🔗 CVE IDs covered (1)

CVE-2024-39322 →

📋 Description

Improper access control allows editors to remove admin group and locale configuration in Aimeos backend

🎯 Affected products5

  • composer/aimeos/ai-admin-jsonadm:= 2024.04.1
  • composer/aimeos/ai-admin-jsonadm:>= 2023.04.1, < 2023.10.4
  • composer/aimeos/ai-admin-jsonadm:>= 2022.04.1, < 2022.10.3
  • composer/aimeos/ai-admin-jsonadm:>= 2021.04.1, < 2021.10.6
  • composer/aimeos/ai-admin-jsonadm:< 2020.10.13

🔗 References (8)