Lucene search

Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-765E19811A05FB72FFE86A0E9B8153A1

HistoryJun 05, 2024 - 12:00 a.m.

Digital products download without proper payment status check

2024-06-0500:00:00

https://gitlab.com/gitlab-org/security-products/gemnasium-db

gitlab.com

digital products

online shops

payment status

7.1 High

AI Score

Confidence

Low

JSON

Digital downloads sold in online shops can be downloaded without valid payment, e.g. if the payment didn’t succeed.

Affected configurations

Vulners

Node

packagistai-client-htmlRange2024.04.1≥

packagistai-client-htmlRange<2024.04.5

packagistai-client-htmlRange2023.04.1≥

packagistai-client-htmlRange<2023.10.14

packagistai-client-htmlRange2022.04.1≥

packagistai-client-htmlRange<2022.10.12

packagistai-client-htmlRange2021.04.1≥

packagistai-client-htmlRange<2021.10.21

packagistai-client-htmlRange2020.04.1≥

packagistai-client-htmlRange<2020.10.27

CPENameOperatorVersion
packagist/aimeos/ai-client-htmlge2024.04.1
packagist/aimeos/ai-client-htmllt2024.04.5
packagist/aimeos/ai-client-htmlge2023.04.1
packagist/aimeos/ai-client-htmllt2023.10.14
packagist/aimeos/ai-client-htmlge2022.04.1
packagist/aimeos/ai-client-htmllt2022.10.12
packagist/aimeos/ai-client-htmlge2021.04.1
packagist/aimeos/ai-client-htmllt2021.10.21
packagist/aimeos/ai-client-htmlge2020.04.1
packagist/aimeos/ai-client-htmllt2020.10.27

Name	Operator	Version
packagist/aimeos/ai-client-html	ge	2024.04.1
packagist/aimeos/ai-client-html	lt	2024.04.5
packagist/aimeos/ai-client-html	ge	2023.04.1
packagist/aimeos/ai-client-html	lt	2023.10.14
packagist/aimeos/ai-client-html	ge	2022.04.1
packagist/aimeos/ai-client-html	lt	2022.10.12
packagist/aimeos/ai-client-html	ge	2021.04.1
packagist/aimeos/ai-client-html	lt	2021.10.21
packagist/aimeos/ai-client-html	ge	2020.04.1
packagist/aimeos/ai-client-html	lt	2020.10.27

References

github.com/advisories/GHSA-v4g2-cm5v-cxv7

github.com/aimeos/ai-client-html

github.com/aimeos/ai-client-html/security/advisories/GHSA-v4g2-cm5v-cxv7

7.1 High

AI Score

Confidence

Low

JSON