CVE-2024-39325

aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15 fix this issue.

• CWE-841

• https://github.com/aimeos/ai-controller-frontend/commit/16b8837d2466e3665b3c826ce87934b01a847268Patch
• https://github.com/aimeos/ai-controller-frontend/commit/24a57001e56759d1582d2a0080fc1ca3ba328630Patch
• https://github.com/aimeos/ai-controller-frontend/commit/28549808e0f6432a34cd3fb95556deeb86ca276dPatch
• https://github.com/aimeos/ai-controller-frontend/commit/b1960c0b6e5ee93111a5360c9ce949b3e7528cf7Patch
• https://github.com/aimeos/ai-controller-frontend/commit/dafa072783bb692f111ed092d9d2932c113eb855Patch
• https://github.com/aimeos/ai-controller-frontend/security/advisories/GHSA-m9gv-6p22-qgmjVendor Advisory
• https://github.com/aimeos/ai-controller-frontend/commit/16b8837d2466e3665b3c826ce87934b01a847268Patch
• https://github.com/aimeos/ai-controller-frontend/commit/24a57001e56759d1582d2a0080fc1ca3ba328630Patch
• https://github.com/aimeos/ai-controller-frontend/commit/28549808e0f6432a34cd3fb95556deeb86ca276dPatch
• https://github.com/aimeos/ai-controller-frontend/commit/b1960c0b6e5ee93111a5360c9ce949b3e7528cf7Patch
• https://github.com/aimeos/ai-controller-frontend/commit/dafa072783bb692f111ed092d9d2932c113eb855Patch
• https://github.com/aimeos/ai-controller-frontend/security/advisories/GHSA-m9gv-6p22-qgmjVendor Advisory

Published

Jul 2, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-3932A vulnerability classified as problematic has been found in …3.1
• CVE-2024-39320Discourse is an open source discussion platform. Prior to 3.…6.1
• CVE-2024-39321Traefik is an HTTP reverse proxy and load balancer. Versions…7.5
• CVE-2024-39322aimeos/ai-admin-jsonadm is the Aimeos e-commerce JSON API fo…5.5
• CVE-2024-39323aimeos/ai-admin-graphql is the Aimeos GraphQL API admin inte…7.1
• CVE-2024-39324aimeos/ai-admin-graphql is the Aimeos GraphQL API admin inte…3.8
• CVE-2024-39326SkillTree is a micro-learning gamification platform. Prior t…4.4
• CVE-2024-39327Incorrect Access Control vulnerability in Atos Eviden IDRA b…9.9
• CVE-2024-39328Insecure Permissions in Atos Eviden IDRA and IDCA before 2.7…6.8
• CVE-2024-39329An issue was discovered in Django 5.0 before 5.0.7 and 4.2 b…5.3
• CVE-2024-3933In Eclipse OpenJ9 release versions prior to 0.44.0 and after…7.3
• CVE-2024-39330An issue was discovered in Django 5.0 before 5.0.7 and 4.2 b…4.3