Aimeos HTML client may potentially reveal sensitive information in error log
Date: 2024-06
Affected: composer/aimeos/ai-client-html, composer/aimeos/ai-client-html, composer/aimeos/ai-client-html
Attack vector: info-disclosure
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2024-38516
CWE: CWE-1295
CVSS: 8.8 (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)

### Impact Debug information can reveal sensitive information from environment variables in error log ### Affected platform Laravel environments with multi-vendor setups and admin access for the vendors


Mitigations:

Architectural layers (MAESTRO):