~ / search / GHSA-ppm5-jv84-2xg2

GHSA-ppm5-jv84-2xg2

Aimeos HTML client may potentially reveal sensitive information in error log

Source: GitHub Advisory Database (reviewed) High CVE-2024-38516

Packages

EcosystemPackageAffectedFixed in
Packagist aimeos/ai-client-html >= 2024.04.1, < 2024.04.7 2024.04.7
Packagist aimeos/ai-client-html >= 2023.04.1, < 2023.10.15 2023.10.15
Packagist aimeos/ai-client-html >= 2022.04.1, < 2022.10.13 2022.10.13
Packagist aimeos/ai-client-html >= 2021.10.1, < 2021.10.22 2021.10.22

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact Debug information can reveal sensitive information from environment variables in error log ### Affected platform Laravel environments with multi-vendor setups and admin access for the vendors

References

External links from the advisory. They lead to third-party sites.