CVE-2024-47173

{"id": "CVE-2024-47173", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 4.2, "exploitabilityScore": 1.2}]}, "published": "2024-10-24T19:15:14.817", "references": [{"url": "https://github.com/aimeos/ai-admin-graphql/security/advisories/GHSA-qxgx-hvg3-v92w", "source": "security-advisories@github.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-270"}]}], "descriptions": [{"lang": "en", "value": "Aimeos is an e-commerce framework. All SaaS and marketplace setups using the Aimeos GraphQL API admin interface version from 2024.04 up to 2024.07.1 are affected by a potential denial of service attack. Version 2024.07.2 fixes the issue."}, {"lang": "es", "value": "Aimeos es un framework de comercio electr\u00f3nico. Todas las configuraciones de SaaS y de mercado que utilizan la interfaz de administraci\u00f3n de la API GraphQL de Aimeos, desde la versi\u00f3n 2024.04 hasta la 2024.07.1, se ven afectadas por un posible ataque de denegaci\u00f3n de servicio. La versi\u00f3n 2024.07.2 soluciona el problema."}], "lastModified": "2024-10-25T12:56:07.750", "sourceIdentifier": "security-advisories@github.com"}