CVE-2024-51408

AppSmith Community 1.8.3 before 1.46 allows SSRF via New DataSource for application/json requests to 169.254.169.254 to retrieve AWS metadata credenti...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

AppSmith Community 1.8.3 before 1.46 allows SSRF via New DataSource for application/json requests to 169.254.169.254 to retrieve AWS metadata credentials.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Paquets affectés

Bitnami appsmith

[{"type":"SEMVER","events":[{"introduced":"1.8.3"},{"fixed":"1.46.0"}]}]

Références

advisory nvd.nist.gov
advisory github.com
patch github.com
web github.com
web github.com