GHSA-ppm5-jv84-2xg2HighCVSS 8.8

Aimeos HTML client may potentially reveal sensitive information in error log

Published
June 25, 2024
Last Modified
June 25, 2024

🔗 CVE IDs covered (1)

CVE-2024-38516 →

📋 Description

Impact

Debug information can reveal sensitive information from environment variables in error log

Affected platform

Laravel environments with multi-vendor setups and admin access for the vendors

🎯 Affected products4

  • composer/aimeos/ai-client-html:>= 2024.04.1, < 2024.04.7
  • composer/aimeos/ai-client-html:>= 2023.04.1, < 2023.10.15
  • composer/aimeos/ai-client-html:>= 2022.04.1, < 2022.10.13
  • composer/aimeos/ai-client-html:>= 2021.10.1, < 2021.10.22

🔗 References (4)