CVE-2024-1063

Appwrite

Original description

The description as published by the source.

Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of CVE-2023-27159.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
package github.com
web tenable.com

Metadata

CVE: CVE-2024-1063
Published: 2024-01-30
First seen on SecPulse: 2 years ago
First-seen source: OSV.dev (Open Source Vulnerabilities)

CWE

CWE-918

Detection sources

OSV.dev (Open Source Vulnerabilities) 2 months ago