Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vrjf-gppf-qvj4

Опубликовано: 30 янв. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of CVE-2023-27159.

Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of CVE-2023-27159.

EPSS

Процентиль: 21%
0.00067
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 5.3
nvd
около 2 лет назад

Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of CVE-2023-27159.

EPSS

Процентиль: 21%
0.00067
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-918