Beveiligingsadvies

CVE-2023-27159

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-03-31 00:00:00
Laatst bijgewerkt 2026-07-09 00:24:27
Toegewezen door mitre
CVSS-score 7.5
Status PUBLISHED

Beschrijving

Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favicon. This vulnerability allows attackers to access network resources and sensitive information via a crafted GET request.