CVE-2024-1063

Опубликовано: 30 янв. 2024

Источник: nvd

CVSS3: 5.3

CVSS3: 7.5

EPSS Низкий

Описание

Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of CVE-2023-27159.

Ссылки

https://www.tenable.com/security/research/tra-2024-03
Third Party Advisory
https://www.tenable.com/security/research/tra-2024-03
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:appwrite:appwrite:*:*:*:*:*:*:*:*

Версия до 1.4.13 (включая)

EPSS

Процентиль: 21%

0.00067

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-918

Связанные уязвимости

GHSA-vrjf-gppf-qvj4

CVSS3: 5.3

github

около 2 лет назад

Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of CVE-2023-27159.

EPSS

Процентиль: 21%

0.00067

Низкий

5.3 Medium

CVSS3

7.5 High

CVSS3

Дефекты

CWE-918