GHSA-8fj2-587w-5whr
aimeos/ai-admin-jsonadm improper access control vulnerability allows editors to remove required records
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | aimeos/ai-admin-jsonadm | >= 2024.04.1, < 2024.04.2 | 2024.04.2 |
| Packagist | aimeos/ai-admin-jsonadm | >= 2023.04.1, < 2023.10.4 | 2023.10.4 |
| Packagist | aimeos/ai-admin-jsonadm | >= 2022.04.1, < 2022.10.3 | 2022.10.3 |
| Packagist | aimeos/ai-admin-jsonadm | >= 2021.04.1, < 2021.10.6 | 2021.10.6 |
| Packagist | aimeos/ai-admin-jsonadm | < 2020.10.13 | 2020.10.13 |
Details
As written in the advisory (Markdown source, shown as plain text).
Improper access control allows editors to remove admin group and locale configuration in Aimeos backend
References
External links from the advisory. They lead to third-party sites.
- https://github.com/aimeos/ai-admin-jsonadm/security/advisories/GHSA-8fj2-587w-5whr
- https://nvd.nist.gov/vuln/detail/CVE-2024-39322
- https://github.com/aimeos/ai-admin-jsonadm/commit/02a063fbd616d4e0a5aaf89f1642a856aa5ac5a5
- https://github.com/aimeos/ai-admin-jsonadm/commit/16d013d0e28cecd19781f434d83fabebcc78cdc2
- https://github.com/aimeos/ai-admin-jsonadm/commit/4c966e02bd52589c3c9382777cfe170eddf17b00
- https://github.com/aimeos/ai-admin-jsonadm/commit/640954243ce85c2c303a00dd6481ed39b3d218fb
- https://github.com/aimeos/ai-admin-jsonadm/commit/7d1c05e8368b0a6419820fe402deac9960500026
- https://github.com/aimeos/ai-admin-jsonadm