What is CVE-2024-37294?

CVE-2024-37294 is a medium-severity vulnerability in Aimeos Aimeos-core, classified under Privilege Context Switching Error. CVSS score: 5.5/10. Published 2024-06-11.

How severe is CVE-2024-37294?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Aimeos Aimeos-core

CVE-2024-37294

Aimeos is an Open Source e-commerce framework for online shops. All SaaS and marketplace setups using Aimeos version from 2022/2023/2024 are affected by a potential denial of service attack. Users should upgrade to versions 2022.10.17, 202…

EPSS: 0.001 (24.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H.

Affected products

Aimeos Aimeos-core — versions >= 2024.04.1, < 2024.04.7, >= 2023.04.1, < 2023.10.17, >= 2022.04.1, < 2022.10.17

Weakness classification (CWE)

CWE-270 — Privilege Context Switching Error

References

https://github.com/aimeos/aimeos-core/security/advisories/GHSA-xjm6-jfmg-qc6p (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2024-37294?: CVE-2024-37294 is a medium-severity vulnerability in Aimeos Aimeos-core, classified under Privilege Context Switching Error. CVSS score: 5.5/10. Published 2024-06-11.
How severe is CVE-2024-37294?: Medium severity. CVSS v3 base score is 5.5 out of 10.