2024-06-21 19:00:33 +00:00
{
2024-09-26 18:06:57 +00:00
"data_version" : "4.0" ,
2024-06-21 19:00:33 +00:00
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"CVE_data_meta" : {
"ID" : "CVE-2024-39319" ,
2024-09-26 18:06:57 +00:00
"ASSIGNER" : "security-advisories@github.com" ,
"STATE" : "PUBLIC"
2024-06-21 19:00:33 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2024-09-26 18:06:57 +00:00
"value" : "aimeos/ai-controller-frontend is the Aimeos frontend controller package for e-commerce projects. Prior to versions 2024.4.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, an insecure direct object reference allows an attacker to disable subscriptions and reviews of another customer. Versions 2024.4.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15 fix this issue."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "CWE-639: Authorization Bypass Through User-Controlled Key" ,
"cweId" : "CWE-639"
}
]
}
]
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "aimeos" ,
"product" : {
"product_data" : [
{
"product_name" : "ai-controller-frontend" ,
"version" : {
"version_data" : [
{
"version_affected" : "=" ,
"version_value" : "= 2024.04.1"
} ,
{
"version_affected" : "=" ,
"version_value" : ">= 2023.04.1, < 2023.10.9"
} ,
{
"version_affected" : "=" ,
"version_value" : ">= 2022.04.1, < 2022.10.8"
} ,
{
"version_affected" : "=" ,
"version_value" : ">= 2021.04.1, < 2021.10.8"
} ,
{
"version_affected" : "=" ,
"version_value" : "< 2020.10.15"
}
]
}
}
]
}
}
]
}
} ,
"references" : {
"reference_data" : [
{
"url" : "https://github.com/aimeos/ai-controller-frontend/security/advisories/GHSA-rw3j-574h-mrcq" ,
"refsource" : "MISC" ,
"name" : "https://github.com/aimeos/ai-controller-frontend/security/advisories/GHSA-rw3j-574h-mrcq"
} ,
{
"url" : "https://github.com/aimeos/ai-controller-frontend/commit/2ad5c062a629af374da470a319914c321c9bfee2" ,
"refsource" : "MISC" ,
"name" : "https://github.com/aimeos/ai-controller-frontend/commit/2ad5c062a629af374da470a319914c321c9bfee2"
} ,
{
"url" : "https://github.com/aimeos/ai-controller-frontend/commit/53eebdc51fae34440dfd768a7811c169c7779aa9" ,
"refsource" : "MISC" ,
"name" : "https://github.com/aimeos/ai-controller-frontend/commit/53eebdc51fae34440dfd768a7811c169c7779aa9"
} ,
{
"url" : "https://github.com/aimeos/ai-controller-frontend/commit/5833db6d18a889b94dc036dfb84b6f5cca73fbac" ,
"refsource" : "MISC" ,
"name" : "https://github.com/aimeos/ai-controller-frontend/commit/5833db6d18a889b94dc036dfb84b6f5cca73fbac"
} ,
{
"url" : "https://github.com/aimeos/ai-controller-frontend/commit/6ea6b82f5a1fc18c574cb6f97225930d139b14a5" ,
"refsource" : "MISC" ,
"name" : "https://github.com/aimeos/ai-controller-frontend/commit/6ea6b82f5a1fc18c574cb6f97225930d139b14a5"
} ,
{
"url" : "https://github.com/aimeos/ai-controller-frontend/commit/700da5ea2b622724b68c8684346bf74ac3bbca9b" ,
"refsource" : "MISC" ,
"name" : "https://github.com/aimeos/ai-controller-frontend/commit/700da5ea2b622724b68c8684346bf74ac3bbca9b"
} ,
{
"url" : "https://github.com/aimeos/ai-controller-frontend/commit/7c93139f86eff9ec26b117a8918e06ce6cc0000f" ,
"refsource" : "MISC" ,
"name" : "https://github.com/aimeos/ai-controller-frontend/commit/7c93139f86eff9ec26b117a8918e06ce6cc0000f"
} ,
{
"url" : "https://github.com/aimeos/ai-controller-frontend/commit/ae7baa3f2fbf594c2c1e4b1aae83364a84b241a6" ,
"refsource" : "MISC" ,
"name" : "https://github.com/aimeos/ai-controller-frontend/commit/ae7baa3f2fbf594c2c1e4b1aae83364a84b241a6"
} ,
{
"url" : "https://github.com/aimeos/ai-controller-frontend/commit/cd8c95aa4663f54bd66a69c5952f2e42405426f3" ,
"refsource" : "MISC" ,
"name" : "https://github.com/aimeos/ai-controller-frontend/commit/cd8c95aa4663f54bd66a69c5952f2e42405426f3"
} ,
{
"url" : "https://github.com/aimeos/ai-controller-frontend/commit/d4eac06f3a25330c089d8be4397f2ab1936dd9bb" ,
"refsource" : "MISC" ,
"name" : "https://github.com/aimeos/ai-controller-frontend/commit/d4eac06f3a25330c089d8be4397f2ab1936dd9bb"
} ,
{
"url" : "https://github.com/aimeos/ai-controller-frontend/commit/f7c6a9ce2a6f5a9ad4af31313508870a78398f85" ,
"refsource" : "MISC" ,
"name" : "https://github.com/aimeos/ai-controller-frontend/commit/f7c6a9ce2a6f5a9ad4af31313508870a78398f85"
}
]
} ,
"source" : {
"advisory" : "GHSA-rw3j-574h-mrcq" ,
"discovery" : "UNKNOWN"
} ,
"impact" : {
"cvss" : [
{
"attackComplexity" : "LOW" ,
"attackVector" : "NETWORK" ,
"availabilityImpact" : "NONE" ,
"baseScore" : 5.3 ,
"baseSeverity" : "MEDIUM" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "LOW" ,
"privilegesRequired" : "NONE" ,
"scope" : "UNCHANGED" ,
"userInteraction" : "NONE" ,
"vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" ,
"version" : "3.0"
2024-06-21 19:00:33 +00:00
}
]
}
}
