appwrite kayıtları
appwrite üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %66,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-918 Server-Side Request Forgery (SSRF)2
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-798 Use of Hard-coded Credentials1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
41Planlayın | CVE-2023-27159Kavram kanıtı | Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favicon.appwrite · appwrite · CWE-918 | Yüksek7,5 | — | %36,4 | 31 Mar 2023 |
40Planlayın | CVE-2021-23682İstismar yok | This affects the package litespeed.js before 0.3.12; the package appwrite/server-ce from 0.12.0 and before 0.12.2, before 0.11.1.appwrite · appwrite · CWE-1321 | Kritik9,8 | — | %2,1 | 16 Şub 2022 |
30İzleyin | CVE-2022-25377İstismar yok | The ACME-challenge endpoint in Appwrite 0.5.0 through 0.12.x before 0.12.2 allows remote attackers to read arbitrary local files via ../ dirappwrite · appwrite · CWE-22 | Yüksek7,5 | — | %0,8 | 22 Şub 2024 |
30İzleyin | CVE-2024-1063İstismar yok | Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of Cappwrite · appwrite · CWE-918 | Yüksek7,5 | — | %0,4 | 30 Oca 2024 |
22İzleyin | CVE-2023-50974İstismar yok | In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json fileappwrite · command line interface · CWE-798 | Orta5,5 | — | %0,3 | 9 Oca 2024 |
21İzleyin | CVE-2022-2925İstismar yok | Cross-site Scripting (XSS) - Stored in appwrite/appwriteappwrite · appwrite · CWE-79 | Orta5,4 | — | %0,8 | 9 Eyl 2022 |
- CVE-2023-2715941Planlayın
Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favicon.
YüksekCVSS 7,5Kavram kanıtıEPSS %36appwrite · appwrite31 Mar 2023
- CVE-2021-2368240Planlayın
This affects the package litespeed.js before 0.3.12; the package appwrite/server-ce from 0.12.0 and before 0.12.2, before 0.11.1.
KritikCVSS 9,8İstismar yokEPSS %2appwrite · appwrite16 Şub 2022
- CVE-2022-2537730İzleyin
The ACME-challenge endpoint in Appwrite 0.5.0 through 0.12.x before 0.12.2 allows remote attackers to read arbitrary local files via ../ dir
YüksekCVSS 7,5İstismar yokEPSS %1appwrite · appwrite22 Şub 2024
- CVE-2024-106330İzleyin
Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of C
YüksekCVSS 7,5İstismar yokEPSS %0appwrite · appwrite30 Oca 2024
- CVE-2023-5097422İzleyin
In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file
OrtaCVSS 5,5İstismar yokEPSS %0appwrite · command line interface9 Oca 2024
- CVE-2022-292521İzleyin
Cross-site Scripting (XSS) - Stored in appwrite/appwrite
OrtaCVSS 5,4İstismar yokEPSS %1appwrite · appwrite9 Eyl 2022