Description
An issue in the Elasticsearch plugin of Appsmith v1.7.11 allows attackers to connect disallowed hosts to the AWS/GCP internal metadata endpoint.
Unscored
CVE-2022-38299
EUVD-2022-40891GHSA-v6wm-h278-4mr8
An issue in the Elasticsearch plugin of Appsmith v1.7.11 allows attackers to connect disallowed hosts to the AWS/GCP internal metadata endp…
Published Sep 12, 2022 · Updated Aug 3, 2024 · Assigned by mitre