MEDIUM5.5
GHSA-xjm6-jfmg-qc6p
Aimeos denial of service vulnerability in SaaS and marketplace setups
Quick fix
GHSA-xjm6-jfmg-qc6p — aimeos/aimeos-core: upgrade to the fixed version with the command below.
composer require aimeos/aimeos-core:^2024.04.7Details
### Impact All SaaS and marketplace setups using Aimeos version from 2022/2023/2024 are affected by a potential denial of service attack
### Patches Upgrade to the latest 2022.10 LTS, 2023.10 LTS and 2024.04.7 version of the aimeos/aimeos-core package
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/aimeos/aimeos-core
Introduced in:
2024.04.1Fixed in: 2024.04.7Fix
composer require aimeos/aimeos-core:^2024.04.7Packagist/aimeos/aimeos-core
Introduced in:
2023.04.1Fixed in: 2023.10.17Fix
composer require aimeos/aimeos-core:^2023.10.17Packagist/aimeos/aimeos-core
Introduced in:
2022.04.1Fixed in: 2022.10.17Fix
composer require aimeos/aimeos-core:^2022.10.17References
- https://github.com/aimeos/aimeos-core/security/advisories/GHSA-xjm6-jfmg-qc6p[WEB]
- https://nvd.nist.gov/vuln/detail/CVE-2024-37294[ADVISORY]
- https://github.com/aimeos/aimeos-core/commit/66edb06a53e51d90e075aad1932811c53c40af6f[WEB]
- https://github.com/aimeos/aimeos-core/commit/69e2ea127c4e2fd2e756a80a16442bea0351a461[WEB]
- https://github.com/aimeos/aimeos-core/commit/e933345915fc0cfafc6a011b853bc0228a61a45f[WEB]
- https://github.com/aimeos/aimeos-core[PACKAGE]
- https://github.com/aimeos/aimeos-core/compare/2022.10.16...2022.10.17[WEB]
- https://github.com/aimeos/aimeos-core/compare/2023.10.16...2023.10.17[WEB]
- https://github.com/aimeos/aimeos-core/compare/2024.04.6...2024.04.7[WEB]