← Database

CVE-2024-39325

MEDIUM CVSS: 5.3 Published: 2024-07-02 Modified: 2026-06-17

Description

aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15 fix this issue.

Affected Platforms

Aimeos Aimeos Frontend Controller

Weakness Type

CWE-841, NVD-CWE-Other

References