Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2024-47173

Aimeos GraphQL API admin interface denial of service vulnerability in SaaS and marketplace setups

Description

Aimeos is an e-commerce framework. All SaaS and marketplace setups using the Aimeos GraphQL API admin interface version from 2024.04 up to 2024.07.1 are affected by a potential denial of service attack. Version 2024.07.2 fixes the issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

aimeos ai-admin-graphql

  • >= 2024.04.1, < 2024.07.2affected

References