high8.8
CVE-2024-38516
Aimeos HTML client may potentially reveal sensitive information in error log
Impact
### Impact Debug information can reveal sensitive information from environment variables in error log ### Affected platform Laravel environments with multi-vendor setups and admin access for the vendors
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | aimeos/ai-client-html | >= 2024.04.1, < 2024.04.7 | 2024.04.7 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/aimeos/ai-client-html/commit/bb389620ffc3cf4a2f29c11a1e5f512049e0c132
- https://github.com/aimeos/ai-client-html/security/advisories/GHSA-ppm5-jv84-2xg2
- https://github.com/advisories/GHSA-ppm5-jv84-2xg2
- https://nvd.nist.gov/vuln/detail/CVE-2024-38516