Privilege Context Switching Error Affecting aimeos/aimeos-core package, versions >=2022.04.1, <2022.10.17>=2023.04.1, <2023.10.17>=2024.04.1, <2024.04.7


Severity

Recommended
0.0
medium
0
10

CVSS assessment made by Snyk's Security Team. Learn more

Threat Intelligence

EPSS
0.04% (12th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-PHP-AIMEOSAIMEOSCORE-7165854
  • published12 Jun 2024
  • disclosed29 May 2024
  • creditShail Shah

Introduced: 29 May 2024

CVE-2024-37294  (opens in a new tab)
CWE-270  (opens in a new tab)

How to fix?

Upgrade aimeos/aimeos-core to version 2022.10.17, 2023.10.17, 2024.04.7 or higher.

Overview

Affected versions of this package are vulnerable to Privilege Context Switching Error through the SaaS and marketplace setups. An attacker can cause a denial of service by exploiting the vulnerability in these configurations.

CVSS Base Scores

version 3.1