Appwrite Vulnerable to Cross-site Scripting

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-2925 · ADVISORY
• appwrite/appwrite commit b5b4d92 · WEB
• drive.google.com/file/d/1JoMQy1KTodVtIVOzH3vKcC3AwZz0PrFb/view · WEB
• appwrite/appwrite · PACKAGE
• huntr.dev/bounties/a3b4148f-165f-4583-abed-5568696d99dc · WEB

appwrite/server-ce のその他の脆弱性

• CVE-2022-25377高 7.5The ACME-challenge endpoint in Appwrite 0.5.0 through 0.12.x before 0.12.2 allows remote attackers to read arbitrary local files via ../ dir…
• CVE-2023-27159高 7.5Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favicon. This vulnerabili…
• CVE-2021-23682緊急 9.8This affects the package litespeed.js before 0.3.12; the package appwrite/server-ce from 0.12.0 and before 0.12.2, before 0.11.1. When parsi…