Skip to content
OpenAdvisories

Vendor

appsmithorg

10 known vulnerabilities.

Products

appsmith 9 appsmithorg/appsmith 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.9
    CVE-2026-50189

    Appsmith: RCE via Supervisord XML-RPC Admin Interface Exposed via /supervisor Caddy Route

    Appsmith is a platform to build admin panels, internal tools, and dashboards. Prior to 2.1, Appsmith's bundled supervisord exposes an XML-RPC interface on port 9001, reachable from outside the container via a Caddy reverse-proxy route at /supervisor/* on the …

    appsmithorg appsmith
  • High 7.3
    CVE-2026-5418

    appsmithorg appsmith Dashboard WebClientUtils.java computeDisallowedHosts server-side request forgery

    A vulnerability was identified in appsmithorg appsmith up to 1.97. Impacted is the function computeDisallowedHosts of the file app/server/appsmith-interfaces/src/main/java/com/appsmith/util/WebClientUtils.java of the component Dashboard. Such manipulation lea…

    appsmithorg appsmith
  • High 8.8
    CVE-2022-4096 Public exploit

    Server-Side Request Forgery (SSRF) in appsmithorg/appsmith

    Server-Side Request Forgery (SSRF) in GitHub repository appsmithorg/appsmith prior to 1.8.2.

    appsmithorg appsmithorg/appsmith