Appwrite Security Vulnerabilities and Issues — Appwrite CVE List

Lucene search

AppwriteAppwrite

5 matches found

CVE•added 2024/02/22 10:15 p.m.•3839 views

CVE-2022-25377

The ACME-challenge endpoint in Appwrite 0.5.0 through 0.12.x before 0.12.2 allows remote attackers to read arbitrary local files via ../ directory traversal. In order to be vulnerable, APP_STORAGE_CERTIFICATES/.well-known/acme-challenge must exist on disk. (This pathname is automatically created if...

7.5CVSS6.6AI score0.00139EPSS

CVE•added 2022/02/16 5:15 p.m.•74 views

CVE-2021-23682

This affects the package litespeed.js before 0.3.12; the package appwrite/server-ce from 0.12.0 and before 0.12.2, before 0.11.1. When parsing the query string in the getJsonFromUrl function, the key that is set in the result object is not properly sanitized leading to a Prototype Pollution vulnera...

9.8CVSS8.3AI score0.05124EPSS

CVE•added 2023/03/31 7:15 p.m.•51 views

CVE-2023-27159

Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favicon. This vulnerability allows attackers to access network resources and sensitive information via a crafted GET request.

7.5CVSS7.2AI score0.80247EPSS

CVE•added 2022/09/09 6:15 a.m.•46 views

CVE-2022-2925

Cross-site Scripting (XSS) - Stored in GitHub repository appwrite/appwrite prior to 1.0.0-RC1.

9CVSS5.6AI score0.00163EPSS

CVE•added 2024/01/30 10:15 a.m.•32 views

CVE-2024-1063

Appwrite

7.5CVSS7.5AI score0.80247EPSS