CVE-2024-47173mediumCWE-270

CVE-2024-47173: falha de média gravidade em aimeos ai-admin-graphql

Aimeos GraphQL API admin interface denial of service vulnerability in SaaS and marketplace setups

Publicada em

Seguir esta CVE+ Monitorar ai-admin-graphql+ Monitorar aimeos/ai-admin-graphql

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.5epss 0.4%
Aimeos is an e-commerce framework. All SaaS and marketplace setups using the Aimeos GraphQL API admin interface version from 2024.04 up to 2024.07.1 are affected by a potential denial of service attack. Version 2024.07.2 fixes the issue.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
Produtos afetados
aimeos · ai-admin-graphql
CVEs relacionadas — aimeos ai-admin-graphql

No mesmo produto, das mais perigosas para as menos.

CVE-2024-39323HIGHaimeos/ai-admin-graphql improper access control vulnerability allows an editor to modify admin accountEPSS 0.4%CVE-2024-39324LOWaimeos/ai-admin-graphql improper access control vulnerability allows editors to manage own servicesEPSS 0.4%