CVE-2024-51408

AppSmith Community 1.8.3 before 1.46 allows SSRF via New DataSource for application/json requests to 169.254.169.254 to retrieve AWS metadata credenti...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

AppSmith Community 1.8.3 before 1.46 allows SSRF via New DataSource for application/json requests to 169.254.169.254 to retrieve AWS metadata credentials.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

影響パッケージ

Bitnami appsmith

[{"type":"SEMVER","events":[{"introduced":"1.8.3"},{"fixed":"1.46.0"}]}]

参照URL

advisory nvd.nist.gov
advisory github.com
patch github.com
web github.com
web github.com