https://vulnerability.circl.lu Contains only the most 10 recent sightings. http://www.rssboard.org/rss-specification python-feedgen en Wed, 06 May 2026 13:01:02 +0000 https://vulnerability.circl.lu/sighting/2f2b4533-851a-454b-b168-446f111e2f24/export {"uuid": "2f2b4533-851a-454b-b168-446f111e2f24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-39319", "type": "seen", "source": "https://t.me/cvedetector/6426", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-39319 - Aimeos ai-Controller Frontend Insecure Direct Object Reference Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-39319 \nPublished : Sept. 26, 2024, 4:15 p.m. | 32\u00a0minutes ago \nDescription : aimeos/ai-controller-frontend is the Aimeos frontend controller package for e-commerce projects. Prior to versions 2024.4.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, an insecure direct object reference allows an attacker to disable subscriptions and reviews of another customer. Versions 2024.4.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15 fix this issue. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T18:50:19.000000Z"} {"uuid": "2f2b4533-851a-454b-b168-446f111e2f24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-39319", "type": "seen", "source": "https://t.me/cvedetector/6426", "content": "{\n \"Source\": \"CVE FEED\",\n \"Title\": \"CVE-2024-39319 - Aimeos ai-Controller Frontend Insecure Direct Object Reference Vulnerability\", \n \"Content\": \"CVE ID : CVE-2024-39319 \nPublished : Sept. 26, 2024, 4:15 p.m. | 32\u00a0minutes ago \nDescription : aimeos/ai-controller-frontend is the Aimeos frontend controller package for e-commerce projects. Prior to versions 2024.4.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, an insecure direct object reference allows an attacker to disable subscriptions and reviews of another customer. Versions 2024.4.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15 fix this issue. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n \"Detection Date\": \"26 Sep 2024\",\n \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-26T18:50:19.000000Z"} https://vulnerability.circl.lu/sighting/2f2b4533-851a-454b-b168-446f111e2f24/export Thu, 26 Sep 2024 18:50:19 +0000