Skip to content
OpenAdvisories

Package · Packagist

appwrite/server-ce

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2022-25377

    Appwrite Directory Traversal vulnerability

    The ACME-challenge endpoint in Appwrite 0.5.0 through 0.12.x before 0.12.2 allows remote attackers to read arbitrary local files via ../ directory traversal. In order to be vulnerable, APP_STORAGE_CERTIFICATES/.well-known/acme-challenge must exist on disk. (T…

    appwrite/server-ce Packagist
  • High 7.5
    CVE-2023-27159 EPSS 36%

    Appwrite Server-Side Request Forgery vulnerability

    Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favicon. This vulnerability allows attackers to access network resources and sensitive information via a crafted GET request.

    appwrite/server-ce Packagist
  • High 7.3
    CVE-2021-23682

    Prototype Pollution

    This affects the package litespeed.js before 0.3.12; the package appwrite/server-ce from 0.12.0 and before 0.12.2, before 0.11.1. When parsing the query string in the getJsonFromUrl function, the key that is set in the result object is not properly sanitized …

    appwrite/server-ce litespeed.js npm Packagist