p PatchFirst

PatchFirst · Latest vulnerabilities

aimeos/aimeos-core vulnerabilities

Vulnerabilities published for aimeos/aimeos-core in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 2

  1. CVE-2024-37295

    High · CVSS 7.2EPSS 0.61%Fix available

    Aimeos Core remote code execution in web server context

    Aimeos is an Open Source e-commerce framework for online shops. Starting in version 2024.01.1 and prior to version 2024.04.5, a user with administrative privileges can upload files that look like images but contain PHP code which can then be executed in the context of the web server. Version 2024.04.5 fixes the issue.

    aimeos/aimeos-corePHP
    • Update to 2024.04.5
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

  2. CVE-2024-37294

    Medium · CVSS 5.5EPSS 0.43%Fix available

    Aimeos denial of service vulnerability in SaaS and marketplace setups

    Aimeos is an Open Source e-commerce framework for online shops. All SaaS and marketplace setups using Aimeos version from 2022/2023/2024 are affected by a potential denial of service attack. Users should upgrade to versions 2022.10.17, 2023.10.17, or 2024.04 of the aimeos/aimeos-core package to receive a patch.

    aimeos/aimeos-core aimeos/aimeos-core aimeos/aimeos-corePHP
    • Update to 2022.10.17
    • Update to 2023.10.17
    • Update to 2024.04.7
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →