CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-39324

aimeos/ai-admin-graphql is the Aimeos GraphQL API admin interface. Starting in version 2022.04.1 and prior to versions 2022.10.10, 2023.10.6, and 2024.4.2, improper access control allows a editors to manage own services via GraphQL API which isn't allowed in the JQAdm front end. Versions 2022.10.10, 2023.10.6, and 2024.4.2 contain a patch for the issue.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 49.1%

CVSS Severity

CVSS v3 Score 3.8

References

Products affected by CVE-2024-39324

Aimeos » Ai-Admin-Graphql » Version: 2022.10.1

cpe:2.3:a:aimeos:ai-admin-graphql:2022.10.1
Aimeos » Ai-Admin-Graphql » Version: 2022.10.2

cpe:2.3:a:aimeos:ai-admin-graphql:2022.10.2
Aimeos » Ai-Admin-Graphql » Version: 2022.10.3

cpe:2.3:a:aimeos:ai-admin-graphql:2022.10.3
Aimeos » Ai-Admin-Graphql » Version: 2022.10.4

cpe:2.3:a:aimeos:ai-admin-graphql:2022.10.4
Aimeos » Ai-Admin-Graphql » Version: 2022.10.5

cpe:2.3:a:aimeos:ai-admin-graphql:2022.10.5
Aimeos » Ai-Admin-Graphql » Version: 2022.10.6

cpe:2.3:a:aimeos:ai-admin-graphql:2022.10.6
Aimeos » Ai-Admin-Graphql » Version: 2022.10.7

cpe:2.3:a:aimeos:ai-admin-graphql:2022.10.7
Aimeos » Ai-Admin-Graphql » Version: 2022.10.8

cpe:2.3:a:aimeos:ai-admin-graphql:2022.10.8
Aimeos » Ai-Admin-Graphql » Version: 2022.10.9

cpe:2.3:a:aimeos:ai-admin-graphql:2022.10.9
Aimeos » Ai-Admin-Graphql » Version: 2023.04.1

cpe:2.3:a:aimeos:ai-admin-graphql:2023.04.1
Aimeos » Ai-Admin-Graphql » Version: 2023.04.2

cpe:2.3:a:aimeos:ai-admin-graphql:2023.04.2
Aimeos » Ai-Admin-Graphql » Version: 2023.04.3

cpe:2.3:a:aimeos:ai-admin-graphql:2023.04.3
Aimeos » Ai-Admin-Graphql » Version: 2023.07.1

cpe:2.3:a:aimeos:ai-admin-graphql:2023.07.1
Aimeos » Ai-Admin-Graphql » Version: 2023.07.2

cpe:2.3:a:aimeos:ai-admin-graphql:2023.07.2
Aimeos » Ai-Admin-Graphql » Version: 2023.10.1

cpe:2.3:a:aimeos:ai-admin-graphql:2023.10.1
Aimeos » Ai-Admin-Graphql » Version: 2023.10.2

cpe:2.3:a:aimeos:ai-admin-graphql:2023.10.2
Aimeos » Ai-Admin-Graphql » Version: 2023.10.3

cpe:2.3:a:aimeos:ai-admin-graphql:2023.10.3
Aimeos » Ai-Admin-Graphql » Version: 2023.10.4

cpe:2.3:a:aimeos:ai-admin-graphql:2023.10.4
Aimeos » Ai-Admin-Graphql » Version: 2023.10.5

cpe:2.3:a:aimeos:ai-admin-graphql:2023.10.5
Aimeos » Ai-Admin-Graphql » Version: 2024.04.1

cpe:2.3:a:aimeos:ai-admin-graphql:2024.04.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-39324

Products

Pricing

Contact Us