CVE-2024-1063: Server-Side Request Forgery (SSRF)

Appwrite = v1.4.13 is affected by a Server-Side Request Forgery SSRF via the '/v1/avatars/favicon' endpoint due to an incomplete fix of CVE-2023-27159...

Appwrite Code Issue Vulnerability

Appwrite is Appwrite open source an end-to-end backend server . It is used to package web, mobile, native or backend applications as a set of Docker microservices. A security vulnerability exists in Appwrite v1.4.13 and earlier versions, which stems from a discovery via the /v1/avatars/favicon...

PT-2024-16423

Name of the Vulnerable Software and Affected Versions Appwrite versions prior to v1.4.14 Description The issue is related to a Server-Side Request Forgery SSRF that can be exploited via the "/v1/avatars/favicon" endpoint. This is due to an incomplete fix of a previously identified issue...

appw (>=0.0.1, <=0.0.2) potentially affected by CVE-2023-50974 via appwrite (2.0.2)

appwrite PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on appwrite and may be impacted: - appw =0.0.1, =0.0.2 Source cves: CVE-2023-50974 Source advisory: OSV:GHSA-G777-CRP9-M27G...

cityfront (>=0.1.0, <=1.0.0) potentially affected by CVE-2023-50974 via appwrite (0.10.0)

appwrite PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on appwrite and may be impacted: - cityfront =0.1.0, =1.0.0 Source cves: CVE-2023-50974 Source advisory: OSV:GHSA-G777-CRP9-M27G...

Apprite CLI makes Use of Hard-coded Credentials

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a /.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials...

GHSA-G777-CRP9-M27G Apprite CLI makes Use of Hard-coded Credentials

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a /.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials...

appw (>=0.0.1, <=0.0.2), cityfront (>=0.1.0, <=1.0.0) potentially affected by CVE-2023-50974 via appwrite (>=0.10.0, <=2.0.2)

appwrite PYPI version =0.10.0, =0.0.1, =0.1.0, =1.0.0 Source cves: CVE-2023-50974 Source advisory: GHSA-G777-CRP9-M27G...

CVE-2023-50974

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a /.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials...

CVE-2023-50974

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a /.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials...

appw (>=0.0.1, <=0.0.2) potentially affected by CVE-2023-50974 via appwrite (2.0.2)

appwrite PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on appwrite and may be impacted: - appw =0.0.1, =0.0.2 Source cves: CVE-2023-50974 Source advisory: OSV:PYSEC-2024-2...

cityfront (>=0.1.0, <=1.0.0) potentially affected by CVE-2023-50974 via appwrite (0.10.0)

appwrite PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on appwrite and may be impacted: - cityfront =0.1.0, =1.0.0 Source cves: CVE-2023-50974 Source advisory: OSV:PYSEC-2024-2...

PYSEC-2024-2

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a /.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials...

Command injection

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a /.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials...

PYSEC-2024-2

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a /.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials...

appw (>=0.0.1, <=0.0.2), cityfront (>=0.1.0, <=1.0.0) potentially affected by CVE-2023-50974 via appwrite (>=0.10.0, <=2.0.2)

appwrite PYPI version =0.10.0, =0.0.1, =0.1.0, =1.0.0 Source cves: CVE-2023-50974 Source advisory: MEND:CVE-2023-50974...

Appwrite Security Vulnerabilities

Appwrite is Appwrite open source an end-to-end backend server . It is used to package web, mobile, native or backend applications as a set of Docker microservices. A security vulnerability exists in the Appwrite CLI prior to version 3.0.0, which stems from the fact that when the login command is...

CVE-2023-50974

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a /.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials...

CVE-2023-50974

CVE-2023-50974 affects Appwrite CLI prior to 3.0.0. The login command stores the Appwrite user’s credentials in ~/.appwrite/prefs.json with 0644 permissions, allowing any local system user to read them. Red Hat and OSV references corroborate the same description. Remediation: upgrade Appwrite CLI...

CVE-2023-50974

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a /.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials...