CVE-2022-38299
An issue in the Elasticsearch plugin of Appsmith v1.7.11 allows attackers to connect disallowed hosts to the AWS/GCP internal metadata endpoint.
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue in the Elasticsearch plugin of Appsmith v1.7.11 allows attackers to connect disallowed hosts to the AWS/GCP internal metadata endpoint.
Paquets affectés
Bitnami
appsmith
[{"type":"SEMVER","events":[{"introduced":"1.7.11"},{"fixed":"1.7.12"}]}]
Références
- advisory nvd.nist.gov
- advisory github.com
- patch github.com