📦 Aimeos Frontend Controller

This vulnerability in the Aimeos frontend controller package allows attackers to disable subscriptions and reviews belonging to other customers through insecure direct object references. It affects e-...

This vulnerability in Aimeos frontend controller allows improper payment status persistence after purchase completion. Attackers could potentially manipulate payment states to obtain goods without pro...