CVE-2024-47173: Aimeos GraphQL API admin interface denial of service vulnerability in SaaS and marketplace setups

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2024-10-24 · updated 2026-06-17
Weakness: CWE-270

Description

Aimeos is an e-commerce framework. All SaaS and marketplace setups using the Aimeos GraphQL API admin interface version from 2024.04 up to 2024.07.1 are affected by a potential denial of service attack. Version 2024.07.2 fixes the issue.

Affected products

aimeos ai-admin-graphql: from 2024.04.1, < 2024.07.2

References

https://github.com/aimeos/ai-admin-graphql/security/advisories/GHSA-qxgx-hvg3-v92w

Get alerted when CVE-2024-47173 or the next vulnerability affects your stack