Security Advisory

CVE-2023-27159

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-03-31 00:00:00

Last updated 2025-02-18 15:09:58

Assigner mitre

State PUBLISHED

Description

Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favicon. This vulnerability allows attackers to access network resources and sensitive information via a crafted GET request.

← Browse all CVEs View on cve.org ↗