CVE-2024-47173

MEDIUM

Aimeos GraphQL API admin interface denial of service vulnerability in SaaS and marketplace setups

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2024-47173 has a selected CVSS score of 5.5 (medium).

Description

Aimeos is an e-commerce framework. All SaaS and marketplace setups using the Aimeos GraphQL API admin interface version from 2024.04 up to 2024.07.1 are affected by a potential denial of service attack. Version 2024.07.2 fixes the issue.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 24, 2024 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

ai-admin-graphql

Browse aimeos / ai-admin-graphql
CVE List>= 2024.04.1, < 2024.07.2affected

aimeos/ai-admin-graphql

Browse Packagist / aimeos/ai-admin-graphql
GitHub Advisory2024.04.1 to < 2024.07.2 · Fixed in 2024.07.2affected

References

3