CVE-2024-39323

aimeos/ai-admin-graphql is the Aimeos GraphQL API admin interface. Starting in version 2022.04.01 and prior to versions 2022.10.10, 2023.10.6, and 2024.04.6, an improper access control vulnerability allows an editor to modify and take over an admin account in the back end. Versions 2022.10.10, 2023.10.6, and 2024.04.6 fix this issue.
Configurations

No configuration.

History

02 Jul 2024, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-07-02 16:15

Updated : 2024-07-02 17:44


NVD link : CVE-2024-39323

Mitre link : CVE-2024-39323

CVE.ORG link : CVE-2024-39323


JSON object : View

Products Affected

No product.

CWE
CWE-1220

Insufficient Granularity of Access Control

CWE-863

Incorrect Authorization