CVE-2024-47173CWE-270

Aimeos GraphQL API admin interface denial of service vulnerability in SaaS and marketplace setups

Medium · published October 24, 2024

CVSS v3.1
5.5
EPSS
0%
Percentile
28.6
In the wild
Unconfirmed
What it is

Aimeos is an e-commerce framework. All SaaS and marketplace setups using the Aimeos GraphQL API admin interface version from 2024.04 up to 2024.07.1 are affected by a potential denial of service attack. Version 2024.07.2 fixes the issue.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00360 · 28.6th percentile
Weakness
CWE-270 · Privilege Context Switching Error
Published
2024-10-24T18:54Z
EPSS history
Timeline
  • 24 OCT 18:54Z
    Aimeos GraphQL API admin interface denial of service vulnerability in SaaS and marketplace setups
    cvelistv5