Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-CA2E61819249E4BFC187E059739824EC

HistoryMay 29, 2024 - 12:00 a.m.

Aimeos denial of service vulnerability in SaaS and marketplace setups

2024-05-2900:00:00

https://gitlab.com/gitlab-org/security-products/gemnasium-db

gitlab.com

aimeos

denial of service

saas

marketplace

vulnerability

specific versions

7.1 High

AI Score

Confidence

High

JSON

All SaaS and marketplace setups using Aimeos version from 2022/2023/2024 are affected by a potential denial of service attack

Affected configurations

Vulners

Node

packagistaimeos-coreRange2024.04.1≥

packagistaimeos-coreRange<2024.04.7

packagistaimeos-coreRange2023.04.1≥

packagistaimeos-coreRange<2023.10.17

packagistaimeos-coreRange2022.04.1≥

packagistaimeos-coreRange<2022.10.17

CPENameOperatorVersion
packagist/aimeos/aimeos-corege2024.04.1
packagist/aimeos/aimeos-corelt2024.04.7
packagist/aimeos/aimeos-corege2023.04.1
packagist/aimeos/aimeos-corelt2023.10.17
packagist/aimeos/aimeos-corege2022.04.1
packagist/aimeos/aimeos-corelt2022.10.17

Name	Operator	Version
packagist/aimeos/aimeos-core	ge	2024.04.1
packagist/aimeos/aimeos-core	lt	2024.04.7
packagist/aimeos/aimeos-core	ge	2023.04.1
packagist/aimeos/aimeos-core	lt	2023.10.17
packagist/aimeos/aimeos-core	ge	2022.04.1
packagist/aimeos/aimeos-core	lt	2022.10.17

References

github.com/advisories/GHSA-xjm6-jfmg-qc6p

github.com/aimeos/aimeos-core

github.com/aimeos/aimeos-core/commit/66edb06a53e51d90e075aad1932811c53c40af6f

github.com/aimeos/aimeos-core/commit/69e2ea127c4e2fd2e756a80a16442bea0351a461

github.com/aimeos/aimeos-core/commit/e933345915fc0cfafc6a011b853bc0228a61a45f

github.com/aimeos/aimeos-core/compare/2022.10.16...2022.10.17

github.com/aimeos/aimeos-core/compare/2023.10.16...2023.10.17

github.com/aimeos/aimeos-core/compare/2024.04.6...2024.04.7

github.com/aimeos/aimeos-core/security/advisories/GHSA-xjm6-jfmg-qc6p