CVE-2024-39323

Name of the Vulnerable Software and Affected Versions aimeos/ai-admin-graphql versions 2022.04.01 through 2022.10.09 aimeos/ai-admin-graphql versions 2022.10.10 through 2023.10.05 aimeos/ai-admin-graphql versions 2023.10.06 through 2024.04.05

Description The issue is related to an improper access control vulnerability in the Aimeos GraphQL API admin interface, which allows an editor to modify and take over an admin account in the back end.

Recommendations For versions 2022.04.01 through 2022.10.09, update to version 2022.10.10 or later. For versions 2022.10.10 through 2023.10.05, update to version 2023.10.06 or later. For versions 2023.10.06 through 2024.04.05, update to version 2024.04.6 or later.