Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

aimeos/ai-admin-graphql

3 known vulnerabilities (1 high, 1 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 high, 1 medium, 1 low
Registry
Packagist

Advisories 3

  • CVE-2024-47173Medium 5.5

    Aimeos GraphQL API admin interface denial of service vulnerability in SaaS and marketplace setups

    Affected: from 2024.04.1, fixed in 2024.07.2.

  • aimeos/ai-admin-graphql improper access control vulnerability allows editors to manage own services

    Affected: from 2022.04.1, fixed in 2022.10.10; from 2023.04.1, fixed in 2023.10.6; from 2024.04.1, fixed in 2024.04.2.

  • aimeos/ai-admin-graphql improper access control vulnerability allows an editor to modify admin account

    Affected: from 2022.04.1, fixed in 2022.10.10; from 2023.04.1, fixed in 2023.10.6; from 2024.04.1, fixed in 2024.04.6.