CVE-2022-39824

Server-side JavaScript injection in Appsmith through 1.7.14 allows remote attackers to execute arbitrary JavaScript code from the server via the currentItem property of the list widget, e.g., to perform DoS attacks or achieve an information leak...

PT-2022-25017 · Appsmith · Appsmith

Name of the Vulnerable Software and Affected Versions: Appsmith versions through 1.7.14 Description: The issue allows remote attackers to execute arbitrary JavaScript code from the server via the currentItem property of the list widget. This can be used to perform Denial of Service DoS attacks or...

Appsmith 跨站脚本漏洞

Appsmith is an open source platform from Appsmith Open Source for building, deploying and maintaining internal applications. A security vulnerability exists in Appsmith version 1.7.14, which originates from server-side JavaScript injection and allows remote attackers to execute arbitrary JavaScri...