CVE-2024-39324

Aimeos ai-admin-graphql (GraphQL API admin interface) is affected by improper access control. Starting in version 2022.04.1 and up to but not including patched releases, editors could manage their own services via the GraphQL API, which is not permitted by the JQAdm frontend. Affected/version ran...