CVE-2024-37296

Medium

The Aimeos HTML client provides Aimeos HTML components for e-commerce projects. Starting in version 2020.04.1 and prior to versions…

GitHub_M·CWE-841·Published 2024-06-05

CVSS

5.3

EPSS

0.01

KEV

Exploits

cve.orgen

397 chars

The Aimeos HTML client provides Aimeos HTML components for e-commerce projects. Starting in version 2020.04.1 and prior to versions 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14, and 2024.04.5, digital downloads sold in online shops can be downloaded without valid payment, e.g. if the payment didn't succeed. Versions 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14, and 2024.04.5 fix this issue.

NVDen

397 chars

OSV.deven

203 chars

### Impact Digital downloads sold in online shops can be downloaded without valid payment, e.g. if the payment didn't succeed. ### Patches New versions for the Aimeos HTML client 2020-2024 are available

GHSAen

203 chars

NVDes

471 chars

El cliente HTML de Aimeos proporciona componentes HTML de Aimeos para proyectos de comercio electrónico. A partir de la versión 2020.04.1 y anteriores a las versiones 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14 y 2024.04.5, Las descargas digitales vendidas en tiendas en línea se pueden descargar sin un pago válido, por ejemplo, si el pago no se realizó correctamente. Las versiones 2020.10.27, 2021.10.21, 2022.10.12, 2023.10.14 y 2024.04.5 solucionan este problema.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	5.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
3.1	Primary	cve.org	5.3	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
3.1	Secondary	NVD	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
3.1	Secondary	GHSA	5.3	—	—	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N