CVE-2024-1063 — Appwrite / Appwrite

CVE-2024-1063

Appwrite / Appwrite PUBLISHED

Description (CNA)

Appwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of CVE-2023-27159.

Affected (CNA)

Vendor / product	Versions
Appwrite / Appwrite	affected 0 through 1.4.13

CWE

CWE-918

References

https://www.tenable.com/security/research/tra-2024-03

ADP enrichment

CVE

No English description supplied.

https://www.tenable.com/security/research/tra-2024-03

CISA-ADP

No English description supplied.

No references supplied.