CVE-2024-47173 — Aimeos GraphQL API admin interface denial of service vulnerability in SaaS and marketplace setups

CVE-2024-47173

Aimeos GraphQL API admin interface denial of service vulnerability in SaaS and marketplace setups PUBLISHED

Description (CNA)

Aimeos is an e-commerce framework. All SaaS and marketplace setups using the Aimeos GraphQL API admin interface version from 2024.04 up to 2024.07.1 are affected by a potential denial of service attack. Version 2024.07.2 fixes the issue.

Affected (CNA)

Vendor / product	Versions
aimeos / ai-admin-graphql	affected >= 2024.04.1, < 2024.07.2

CWE

CWE-270

References

https://github.com/aimeos/ai-admin-graphql/security/advisories/GHSA-qxgx-hvg3-v92w

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.