aimeos/ai-controller-frontend · Security
ai-controller-frontend payment status in basket isn't reset
- GHSA ID
- GHSA-m9gv-6p22-qgmj
- CVE ID
- CVE-2024-39325
- Severity
- medium
- Published
- Updated
- CVSS
- 5.3 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
- CVSS v3
- 5.3 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Description
Impact
Payment status in basket isn't reset
CWEs
- CWE-841 · Improper Enforcement of Behavioral Workflow
References
- https://github.com/aimeos/ai-controller-frontend/security/advisories/GHSA-m9gv-6p22-qgmj ↗
- https://nvd.nist.gov/vuln/detail/CVE-2024-39325 ↗
- https://github.com/aimeos/ai-controller-frontend/commit/16b8837d2466e3665b3c826ce87934b01a847268 ↗
- https://github.com/aimeos/ai-controller-frontend/commit/24a57001e56759d1582d2a0080fc1ca3ba328630 ↗
- https://github.com/aimeos/ai-controller-frontend/commit/28549808e0f6432a34cd3fb95556deeb86ca276d ↗
- https://github.com/aimeos/ai-controller-frontend/commit/b1960c0b6e5ee93111a5360c9ce949b3e7528cf7 ↗
- https://github.com/aimeos/ai-controller-frontend/commit/dafa072783bb692f111ed092d9d2932c113eb855 ↗
- https://github.com/advisories/GHSA-m9gv-6p22-qgmj ↗