Security Advisory

CVE-2023-27159

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-03-31 00:00:00

Last updated 2026-07-09 00:24:27

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favicon. This vulnerability allows attackers to access network resources and sensitive information via a crafted GET request.

← Browse all CVEs View on cve.org ↗