Medium severity5.5OSV Advisory· Published Oct 24, 2024· Updated Apr 15, 2026

CVE-2024-47173

Description

Aimeos is an e-commerce framework. All SaaS and marketplace setups using the Aimeos GraphQL API admin interface version from 2024.04 up to 2024.07.1 are affected by a potential denial of service attack. Version 2024.07.2 fixes the issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
aimeos/ai-admin-graphqlPackagist	>= 2024.04.1, < 2024.07.2	2024.07.2

Affected products

Aimeos/AI Admin GraphqlOSV
ghsa-coords
pkg:composer/aimeos/ai-admin-graphql
Range: >= 2024.04.1, < 2024.07.2

Patches

Vulnerability mechanics

References

github.com/advisories/GHSA-qxgx-hvg3-v92wghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-47173ghsaADVISORY
github.com/aimeos/ai-admin-graphql/security/advisories/GHSA-qxgx-hvg3-v92wnvdWEB

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000