Sensitive Information Exposed in Aimeos E-commerce HTML Client Component
CVE-2024-38516
8.8HIGH
What is CVE-2024-38516?
The ai-client-html component of the Aimeos e-commerce framework has a vulnerability that allows debug information to expose sensitive information from environment variables within error logs. This issue could potentially lead to unauthorized access to confidential data. Aimeos has released patches to address this vulnerability in the versions listed above, ensuring that user information remains secure and protected against potential exploitation.
Affected Version(s)
ai-client-html >= 2024.04.1, < 2024.04.7 < 2024.04.1, 2024.04.7
ai-client-html >= 2023.04.1, < 2023.10.15 < 2023.04.1, 2023.10.15
ai-client-html >= 2022.04.1, < 2022.10.13 < 2022.04.1, 2022.10.13