| Package | Affected versions | Patched versions |
|---|---|---|
| appsmith | ≥ 1.8.3, < 1.46 | 1.46 |
AppSmith Community 1.8.3 before 1.46 allows SSRF via New DataSource for application/json requests to 169.254.169.254 to retrieve AWS metadata credentials.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free