CVE-2022-25377

Summary : Multiple sources (Red Hat, Veracode, OSV, GHSA, NVD mirrors) confirm a directory-traversal flaw in Appwrite’s ACME-challenge endpoint. Affected versions : Appwrite 0.5.0 through 0.12.x before 0.12.2. The vulnerability requires the path APP_STORAGE_CERTIFICATES/.well-known/acme-challenge...

CVE-2021-23682

Prototype pollution vulnerability in litespeed.js (

CVE-2023-27159

Appwrite

CVE-2022-2925

CVE-2022-2925 relates to Appwrite: stored XSS vulnerability in the Appwrite server prior to 1.0.0-RC1. Affected components include usernames, function names, storage bucket names, and database collection names. Root cause described in public advisories as improper input handling leading to stored...

CVE-2024-1063

The issue is an SSRF in Appwrite via /v1/avatars/favicon visible in multiple sources. Affected product: Appwrite versions up to 1.4.13; root cause linked to an incomplete fix of CVE-2023-27159. Impact described as potential access to internal resources and data via crafted requests. Remediation: ...