# CVE-2024-37294

## Summary

- **CVE ID:** CVE-2024-37294
- **Severity:** MEDIUM
- **CVSS Score:** 5.5 (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H)
- **CWE:** CWE-270
- **Published:** Jun 11, 2024
- **Last Modified:** Mar 13, 2026

## Description

Aimeos is an Open Source e-commerce framework for online shops. All SaaS and marketplace setups using Aimeos version from 2022/2023/2024 are affected by a potential denial of service attack. Users should upgrade to versions 2022.10.17, 2023.10.17, or 2024.04 of the aimeos/aimeos-core package to receive a patch.

## Affected Products

- aimeos — aimeos-core (>= 2024.04.1, < 2024.04.7)
- aimeos — aimeos-core (>= 2023.04.1, < 2023.10.17)
- aimeos — aimeos-core (>= 2022.04.1, < 2022.10.17)

## References

- [CNA](https://github.com/aimeos/aimeos-core/security/advisories/GHSA-xjm6-jfmg-qc6p)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.43%
- **EPSS Percentile:** 36.7

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._