Skip to content
OpenAdvisories

Package · Packagist

aimeos/aimeos-core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.2
    CVE-2024-37295

    Aimeos Core remote code execution in web server context

    Aimeos is an Open Source e-commerce framework for online shops. Starting in version 2024.01.1 and prior to version 2024.04.5, a user with administrative privileges can upload files that look like images but contain PHP code which can then be executed in the c…

    aimeos aimeos-core aimeos/aimeos-core Packagist
  • Medium 5.5
    CVE-2024-37294

    Aimeos denial of service vulnerability in SaaS and marketplace setups

    Aimeos is an Open Source e-commerce framework for online shops. All SaaS and marketplace setups using Aimeos version from 2022/2023/2024 are affected by a potential denial of service attack. Users should upgrade to versions 2022.10.17, 2023.10.17, or 2024.04 …

    aimeos aimeos-core aimeos/aimeos-core Packagist