Help for Aimeos

Thanks for clarification and for taking care this will be fixed on GitHubs end.

Hey, we saw that CVE-2024-36811 has two different info regarding the affected versions. https://github.com/advisories/GHSA-cr7j-rwmv-vgch states: Affected versions < 2024.04.5, https://github.com/ssshah2131/CVE/blob/main/Aimeos_RCE states: aimeos-core version < 2024.04.5 as well as Vulnerable Versio...

Thank you very much

Thanks for confirming the issue and approach Can you tell me the column name? We currently apply the patch in our project. So using the same column name would make updates way easier as we only would need to remove our patch.

Thanks for your answer. I could verify that the context contains the IP address. The issue then still seems to be https://github.com/aimeos/ai-typo3/blob/2022.10.7/src/MShop/Customer/Manager/Typo3.php#L238 in combination with https://github.com/aimeos/ai-controller-frontend/blob/2022.10.7/src/Contro...

Registration for anonymization can be done this way in ext_localconf.php: \TYPO3\CMS\Core\Utility\ArrayUtility::mergeRecursiveWithOverrule($GLOBALS['TYPO3_CONF_VARS'], [ 'SC_OPTIONS' => [ 'scheduler' => [ 'tasks' => [ \TYPO3\CMS\Scheduler\Task\IpAnonymizationTask::class => [ 'options' => [ 'tables' ...

Another remark: The order passed through but only contained digital products. That leaves the customer in a situation where he pays and receives emails without a way to log in and download the products.

We workaround that by manually creating the user record and linking it to the user.

Our customer called us, because one of the shop customers didn't got his account created. We found the following entry within the aimeos log: Unable to create an account: Temporary limit reached. We tracked it down to the aimeos/ai-controller-frontend/src/Controller/Frontend/Customer/Standard.php fi...

Thanks for your fast response. Unfortunately, there are no automatic rules for upgrading I have not enough experience to start writing rector rules for migrating Aimeos code right now. Maybe I'll do more Aimeos upgrades in the future (I don't know that yet). I'll then will give it a try and share my...

Hi everyone, I'm completely new to Aimeos, and we got a TYPO3 installation with 2018.10 which we upgrade to 2022.10 right now. I'm used to rector and changelogs of TYPO3 for upgrades, and I am wondering if I missed something regarding Aimeos. I found the following sources: - Changelogs like https://...