CVE-2024-39325CWE-841

aimeos/ai-controller-frontend doesn't reset payment status in basket

Medium · published July 2, 2024

CVSS v3.1
5.3
EPSS
0%
Percentile
36.2
In the wild
Unconfirmed
What it is

aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15 fix this issue.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00430 · 36.2th percentile
Weakness
CWE-841 · Improper Enforcement of Behavioral Workflow
Published
2024-07-02T20:36Z
EPSS history
Timeline
  • 02 JUL 20:36Z
    aimeos/ai-controller-frontend doesn't reset payment status in basket
    cvelistv5