CVE-2024-39322

CVE-2024-39322 affects the aimes/ai-admin-jsonadm JSON API used for administrative tasks. In versions prior to 2020.10.13, 2021.10.6, 2022.10.3, 2023.10.4, and 2024.4.2, improper access control allows editors to remove admin group and locale configuration in the Aimeos backend. A fix is present i...