CVE-2023-50974

creationtimestamp| type| source ---|---|--- 2024-01-09 10:26:22+00:00| seen| https://t.me/ctinow/164912 2024-01-12 23:16:31+00:00| seen| https://t.me/ctinow/167589 2024-01-26 09:06:16+00:00| seen| https://t.me/ctinow/174057 2025-06-17 16:41:26+00:00| published-proof-of-concept|...

CVE-2023-50974

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a /.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials...

CVE-2023-50974

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a /.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials...

CVE-2023-50974

CVE-2023-50974 affects Appwrite CLI prior to 3.0.0. The login command stores the Appwrite user’s credentials in ~/.appwrite/prefs.json with 0644 permissions, allowing any local system user to read them. Red Hat and OSV references corroborate the same description. Remediation: upgrade Appwrite CLI...