Skip to content
OpenAdvisories

Package · Maven

com.appsmith:server

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.1
    GHSA-j9gf-vw2f-9hrw

    Appsmith: Configuration-dependent origin validation bypass in password reset and email verification link generation

    ### Summary A configuration-dependent origin validation bypass was identified in Appsmith’s password reset and email verification flows on current `release`. Both flows derive the email-link base URL from the request `Origin` header. The current validation on…

    com.appsmith:server Maven
  • High 8.1
    GHSA-9wcp-79g5-5c3c

    Appsmith Super User Creation Race Condition Allows Multiple Instance Administrators

    ## Summary The `/api/v1/users/super` endpoint enforces a restriction that only one super user (Instance Administrator) can be created during initial setup. However, due to a Time-of-Check-Time-of-Use (TOCTOU) race condition in the `signupAndLoginSuper()` meth…

    com.appsmith:server Maven