CVE-2024-39322

Packagist/aimeos/ai-admin-jsonadm CVE-2024-39322: medium 5.5, EPSS 0.48%

aimeos/ai-admin-jsonadm improper access control vulnerability allows editors to remove required records

Action: Upgrade aimeos/ai-admin-jsonadm to 2020.10.13 or later.

composer require aimeos/ai-admin-jsonadm:2024.04.2

composer require aimeos/ai-admin-jsonadm:2023.10.4

composer require aimeos/ai-admin-jsonadm:2022.10.3

composer require aimeos/ai-admin-jsonadm:2021.10.6

composer require aimeos/ai-admin-jsonadm:2020.10.13

Affected

Fixed versions

Sources

• osv: GHSA-8fj2-587w-5whr
• https://github.com/aimeos/ai-admin-jsonadm/security/advisories/GHSA-8fj2-587w-5whr
• https://nvd.nist.gov/vuln/detail/CVE-2024-39322
• https://github.com/aimeos/ai-admin-jsonadm/commit/02a063fbd616d4e0a5aaf89f1642a856aa5ac5a5
• https://github.com/aimeos/ai-admin-jsonadm/commit/16d013d0e28cecd19781f434d83fabebcc78cdc2
• https://github.com/aimeos/ai-admin-jsonadm/commit/4c966e02bd52589c3c9382777cfe170eddf17b00
• https://github.com/aimeos/ai-admin-jsonadm/commit/640954243ce85c2c303a00dd6481ed39b3d218fb
• https://github.com/aimeos/ai-admin-jsonadm/commit/7d1c05e8368b0a6419820fe402deac9960500026
• https://github.com/aimeos/ai-admin-jsonadm

CVE-2024-39322 · published 2024-07-02T21:21:17Z · modified 2026-09-10T03:50:16.453948494Z · JSON