CVE-2024-37294: Aimeos Aimeos-Core

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Aimeos is an Open Source e-commerce framework for online shops. All SaaS and marketplace setups using Aimeos version from 2022/2023/2024 are affected by a potential denial of service attack. Users should upgrade to versions 2022.10.17, 2023.10.17, or 2024.04 of the aimeos/aimeos-core package to receive a patch.

Affected products

• Aimeos Aimeos-Core: from 2024.04.1, before 2024.04.7 (fixed in 2024.04.7); from 2023.04.1, before 2023.10.17 (fixed in 2023.10.17); from 2022.04.1, before 2022.10.17 (fixed in 2022.10.17); before 2024.04.7 (fixed in 2024.04.7); before 2023.10.17 (fixed in 2023.10.17); before 2022.10.17 (fixed in 2022.10.17)

Published 2024-06-11. Last modified 2026-06-17.