Lucene search
HistorySep 05, 2022 - 3:15 a.m.
CVE-2022-39824
server-side
javascript injection
remote code execution
dos attacks
information leak
CVSS3
8.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:H
EPSS
0.001
Percentile
43.4%
Server-side JavaScript injection in Appsmith through 1.7.14 allows remote attackers to execute arbitrary JavaScript code from the server via the currentItem property of the list widget, e.g., to perform DoS attacks or achieve an information leak.
Affected configurations
Node
appsmithappsmithRange≤1.7.14
Related
osv
osv
BIT-appsmith-2022-39824
2024-03-06 10:50:47
CVE-2022-39824
2022-09-05 03:15:07
cvelist
cvelist
CVE-2022-39824
2022-09-05 02:54:02
cve
cve
CVE-2022-39824
2022-09-05 03:15:07
prion
prion
Design/Logic Flaw
2022-09-05 03:15:00
CVSS3
8.9
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:H
EPSS
0.001
Percentile
43.4%
Related for NVD:CVE-2022-39824