Description

aimeos/ai-admin-graphql is the Aimeos GraphQL API admin interface. Starting in version 2022.04.1 and prior to versions 2022.10.10, 2023.10.6, and 2024.4.2, improper access control allows a editors to manage own services via GraphQL API which isn't allowed in the JQAdm front end. Versions 2022.10.10, 2023.10.6, and 2024.4.2 contain a patch for the issue.

INFO

Published Date :

2024-07-02T20:09:22.872Z

Last Modified :

2024-08-02T04:19:20.752Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2024-39324 vulnerability.

Vendors Products
Aimeos
  • Ai-admin-graphql
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-39324.

URL Resource
https://github.com/aimeos/ai-admin-graphql/commit/4eabc2b973509ffa5924e7f88c8f87ee96e93b38 cve-icon cve-icon
https://github.com/aimeos/ai-admin-graphql/commit/687059d7eb2e1d55a09ed72dad3814f35edad038 cve-icon cve-icon
https://github.com/aimeos/ai-admin-graphql/commit/a839a5adf16fee4221d444b7d2f5140d8cabf0ac cve-icon cve-icon
https://github.com/aimeos/ai-admin-graphql/commit/acbb044620f4ff8e8d78a775cd205ec47cf119b3 cve-icon cve-icon
https://github.com/aimeos/ai-admin-graphql/security/advisories/GHSA-jj68-cp4v-98qf cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact