Skip to content
OpenAdvisories
Medium · 5.5 CVE-2024-47173 EUVD-2024-3123GHSA-qxgx-hvg3-v92w

Aimeos GraphQL API admin interface denial of service vulnerability in SaaS and marketplace setups

Published Oct 24, 2024 · Updated Oct 24, 2024 · Assigned by GitHub_M

Description

Aimeos is an e-commerce framework. All SaaS and marketplace setups using the Aimeos GraphQL API admin interface version from 2024.04 up to 2024.07.1 are affected by a potential denial of service attack. Version 2024.07.2 fixes the issue.

Affected products

VendorProductAffectedFixed
aimeos ai-admin-graphql >= 2024.04.1, < 2024.07.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist aimeos/ai-admin-graphql >= 2024.04.1, < 2024.07.2 2024.07.2 GHSA-qxgx-hvg3-v92w

References