-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| aimeos/ai-controller-frontend | composer | = 2024.04.1 | 2024.04.2 |
| aimeos/ai-controller-frontend | composer | >= 2023.04.1, < 2023.10.9 | 2023.10.9 |
| aimeos/ai-controller-frontend | composer | >= 2022.04.1, < 2022.10.8 | 2022.10.8 |
| aimeos/ai-controller-frontend | composer | >= 2021.04.1, < 2021.10.8 | 2021.10.8 |
| aimeos/ai-controller-frontend | composer | < 2020.10.15 | 2020.10.15 |
The vulnerability stems from missing authorization checks in review deletion and subscription management functions. The GitHub patches show:
Ongoing coverage of React2Shell