PT-2024-32457 · Aimeos · Aimeos

Ssshah2131 · Published 2024-10-24 · Updated 2024-10-25 · CVE-2024-47173

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

Name of the Vulnerable Software and Affected Versions Aimeos versions 2024.04 through 2024.07.1

Description The issue affects all SaaS and marketplace setups using the Aimeos GraphQL API admin interface, potentially allowing a denial of service attack.

Recommendations For versions 2024.04 through 2024.07.1, update to version 2024.07.2 to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-270

Related Identifiers

CVE-2024-47173

GHSA-QXGX-HVG3-V92W

Affected Products

Aimeos

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47173.json · Exploit
• https://osv.dev/vulnerability/GHSA-qxgx-hvg3-v92w · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-47173 · Security Note
• https://osv.dev/vulnerability/CVE-2024-47173 · Vendor Advisory
• https://github.com/aimeos/ai-admin-graphql/security/advisories/GHSA-qxgx-hvg3-v92w · Note
• https://github.com/aimeos/ai-admin-graphql · Note
• https://t.me/cvedetector/8843 · Telegram Post