CVE-2022-38298

Appsmith v1.7.11 was discovered to allow attackers to execute an authenticated Server-Side Request Forgery (SSRF) via redirecting incoming requests to...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

Appsmith v1.7.11 was discovered to allow attackers to execute an authenticated Server-Side Request Forgery (SSRF) via redirecting incoming requests to the AWS internal metadata endpoint.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami appsmith

[{"type":"SEMVER","events":[{"introduced":"1.7.11"},{"fixed":"1.7.12"}]}]

Références

advisory nvd.nist.gov
advisory github.com
patch github.com