Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-86332
HistoryNov 23, 2022 - 12:00 a.m.

Appsmith server-side request forgery vulnerability

2022-11-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
appsmith
ssrf
dns rebinding

0.001 Low

EPSS

Percentile

30.4%

Appsmith is an open source platform used by Appsmith to build, deploy and maintain on-premise applications.Appsmith versions prior to 1.8.2 are vulnerable to server-side request forgery, which can be exploited by attackers to perform authenticated server-side request forgery (SSRF) via DNS rebinding techniques and retrieve data in a manner.

CPENameOperatorVersion
appsmith appsmithlt1.8.2

0.001 Low

EPSS

Percentile

30.4%