Description
Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of CVE-2023-27159.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Appwrite | Appwrite | ≤ 1.4.13 | — |
Medium · 5.3
CVE-2024-1063
EUVD-2024-16838GHSA-vrjf-gppf-qvj4
Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of …
Published Jan 30, 2024 · Updated May 29, 2025 · Assigned by tenable