Skip to content
OpenAdvisories

Vendor

aimeos

13 known vulnerabilities.

Products

ai-admin-graphql 3 ai-controller-frontend 2 aimeos-core 2 ai-client-html 2 ai-admin-jsonadm 1 Aimeos Laravel ecommerce platform 1 pagible 1 ai-cms-grapesjs 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.0
    CVE-2026-49262

    Aimeos Pagible CMS vulnerable to Server Side Request Forgery (SSRF) via DNS rebinding in admin proxy

    In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route (`cmsproxy`) is vulnerable to a Server-Side Request Forgery (SSRF) attack via DNS Rebinding. A Time-of-Check to Time-of-Use (TOCTOU) race condition exists …

    aimeos pagible aimeos/pagible Packagist
  • Low 3.8
    CVE-2024-39324

    aimeos/ai-admin-graphql improper access control vulnerability allows editors to manage own services

    aimeos/ai-admin-graphql is the Aimeos GraphQL API admin interface. Starting in version 2022.04.1 and prior to versions 2022.10.10, 2023.10.6, and 2024.4.2, improper access control allows a editors to manage own services via GraphQL API which isn't allowed in …

    aimeos ai-admin-graphql aimeos/ai-admin-graphql Packagist