Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of CVE-2023-27159.
References
Link | Resource |
---|---|
https://www.tenable.com/security/research/tra-2024-03 | Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: tenable
Published: 2024-01-30T09:20:26.210Z
Updated: 2024-01-30T09:20:26.210Z
Reserved: 2024-01-30T08:48:25.261Z
Link: CVE-2024-1063
JSON object: View
NVD Information
Status : Analyzed
Published: 2024-01-30T10:15:09.267
Modified: 2024-02-05T18:25:57.167
Link: CVE-2024-1063
JSON object: View
Redhat Information
No data.
CWE