Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2024-37294

Date: June 11, 2024

Aimeos is an Open Source e-commerce framework for online shops. All SaaS and marketplace setups using Aimeos version from 2022/2023/2024 are affected by a potential denial of service attack. Users should upgrade to versions 2022.10.17, 2023.10.17, or 2024.04 of the aimeos/aimeos-core package to receive a patch.

Language: PHP

Severity Score

Related Resources (10)

https://github.com/aimeos/aimeos-core/compare/2023.10.16...2023.10.17
https://nvd.nist.gov/vuln/detail/CVE-2024-37294
https://github.com/aimeos/aimeos-core/commit/69e2ea127c4e2fd2e756a80a16442bea0351a461
https://github.com/aimeos/aimeos-core/compare/2024.04.6...2024.04.7
https://github.com/aimeos/aimeos-core/commit/66edb06a53e51d90e075aad1932811c53c40af6f
https://github.com/aimeos/aimeos-core/security/advisories/GHSA-xjm6-jfmg-qc6p
https://github.com/aimeos/aimeos-core/compare/2022.10.16...2022.10.17
https://github.com/aimeos/aimeos-core/commit/e933345915fc0cfafc6a011b853bc0228a61a45f
https://github.com/aimeos/aimeos-core
https://www.mend.io/vulnerability-database/CVE-2024-37294

Severity Score

Weakness Type (CWE)

Privilege Context Switching Error

CWE-270

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): HIGH
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): HIGH

Do you need more information?

Contact Us