CVE-2022-25377

Appwrite versions 0.5.0 through 0.12.x before 0.12.2 are vulnerable to a directory traversal vulnerability in the ACME-challenge endpoint . This flaw allows remote attackers to read arbitrary local files by using ../ sequences. The vulnerability specifically requires the existence of the APP_STOR...

CVE-2021-23682

Prototype pollution vulnerability in litespeed.js (

CVE-2023-27159

Appwrite

CVE-2022-2925

CVE-2022-2925 relates to Appwrite: stored XSS vulnerability in the Appwrite server prior to 1.0.0-RC1. Affected components include usernames, function names, storage bucket names, and database collection names. Root cause described in public advisories as improper input handling leading to stored...

CVE-2024-1063

The issue is an SSRF in Appwrite via /v1/avatars/favicon visible in multiple sources. Affected product: Appwrite versions up to 1.4.13; root cause linked to an incomplete fix of CVE-2023-27159. Impact described as potential access to internal resources and data via crafted requests. Remediation: ...