Skip to content
Noroxi

appwrite records

6 published records for vendor appwrite.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
66.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2023-27159
    41Plan

    Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favicon.

    HighCVSS 7.5Proof of conceptEPSS 36%

    appwrite · appwriteMar 31, 2023

  • CVE-2021-23682
    40Plan

    This affects the package litespeed.js before 0.3.12; the package appwrite/server-ce from 0.12.0 and before 0.12.2, before 0.11.1.

    CriticalCVSS 9.8No exploitEPSS 2%

    appwrite · appwriteFeb 16, 2022

  • CVE-2022-25377
    30Monitor

    The ACME-challenge endpoint in Appwrite 0.5.0 through 0.12.x before 0.12.2 allows remote attackers to read arbitrary local files via ../ dir

    HighCVSS 7.5No exploitEPSS 1%

    appwrite · appwriteFeb 22, 2024

  • CVE-2024-1063
    30Monitor

    Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of C

    HighCVSS 7.5No exploitEPSS 0%

    appwrite · appwriteJan 30, 2024

  • CVE-2023-50974
    22Monitor

    In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file

    MediumCVSS 5.5No exploitEPSS 0%

    appwrite · command line interfaceJan 9, 2024

  • CVE-2022-2925
    21Monitor

    Cross-site Scripting (XSS) - Stored in appwrite/appwrite

    MediumCVSS 5.4No exploitEPSS 1%

    appwrite · appwriteSep 9, 2022