CVE-2024-38516
Aimeos HTML client may potentially reveal sensitive information in error log
概要
Aimeos HTML client may potentially reveal sensitive information in error log
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
ai-client-html is an Aimeos e-commerce HTML client component. Debug information revealed sensitive information from environment variables in error log. This issue has been patched in versions 2024.04.7, 2023.10.15, 2022.10.13 and 2021.10.22.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com