MEDIUM5.5
GHSA-8fj2-587w-5whr
aimeos/ai-admin-jsonadm improper access control vulnerability allows editors to remove required records
Quick fix
GHSA-8fj2-587w-5whr — aimeos/ai-admin-jsonadm: upgrade to the fixed version with the command below.
composer require aimeos/ai-admin-jsonadm:^2024.04.2Details
Improper access control allows editors to remove admin group and locale configuration in Aimeos backend
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/aimeos/ai-admin-jsonadm
Introduced in:
2024.04.1Fixed in: 2024.04.2Fix
composer require aimeos/ai-admin-jsonadm:^2024.04.2Packagist/aimeos/ai-admin-jsonadm
Introduced in:
2023.04.1Fixed in: 2023.10.4Fix
composer require aimeos/ai-admin-jsonadm:^2023.10.4Packagist/aimeos/ai-admin-jsonadm
Introduced in:
2022.04.1Fixed in: 2022.10.3Fix
composer require aimeos/ai-admin-jsonadm:^2022.10.3Packagist/aimeos/ai-admin-jsonadm
Introduced in:
2021.04.1Fixed in: 2021.10.6Fix
composer require aimeos/ai-admin-jsonadm:^2021.10.6Packagist/aimeos/ai-admin-jsonadm
Introduced in:
0Fixed in: 2020.10.13Fix
composer require aimeos/ai-admin-jsonadm:^2020.10.13References
- https://github.com/aimeos/ai-admin-jsonadm/security/advisories/GHSA-8fj2-587w-5whr[WEB]
- https://nvd.nist.gov/vuln/detail/CVE-2024-39322[ADVISORY]
- https://github.com/aimeos/ai-admin-jsonadm/commit/02a063fbd616d4e0a5aaf89f1642a856aa5ac5a5[WEB]
- https://github.com/aimeos/ai-admin-jsonadm/commit/16d013d0e28cecd19781f434d83fabebcc78cdc2[WEB]
- https://github.com/aimeos/ai-admin-jsonadm/commit/4c966e02bd52589c3c9382777cfe170eddf17b00[WEB]
- https://github.com/aimeos/ai-admin-jsonadm/commit/640954243ce85c2c303a00dd6481ed39b3d218fb[WEB]
- https://github.com/aimeos/ai-admin-jsonadm/commit/7d1c05e8368b0a6419820fe402deac9960500026[WEB]
- https://github.com/aimeos/ai-admin-jsonadm[PACKAGE]