要点
- CVE-2024-39325 是影响 aimeos/ai-controller-frontend, aimeos frontend controller (aimeos) 的中危 (CVSS 5.3)漏洞。
- 未来 30 天内被利用的概率（EPSS）：0.43%，高于 37.4% 的漏洞。
- 修复：升级到 2021.10.8, 2022.10.8, 2023.10.9, 2020.10.15 或更高版本。
| Package | Affected versions | Patched versions |
|---|
| aimeos/ai-controller-frontend Packagist | ≥ 2021.04.1, < 2021.10.8≥ 2022.04.1, < 2022.10.8≥ 2023.04.1, < 2023.10.9< 2020.10.15
| 2021.10.82022.10.82023.10.92020.10.15
|
| aimeos frontend controller | = 2024.04.1≥ 2021.04.1, < 2021.10.8≥ 2022.04.1, < 2022.10.8≥ 2023.04.1, < 2023.10.9< 2020.10.15
| 2021.10.82022.10.82023.10.92020.10.15
|
Description
Impact
Payment status in basket isn't reset
NVD description
aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15 fix this issue.
aimeos/ai-controller-frontend 的其他漏洞
查看全部 →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free