Vulnerability in N/a

CVE-2023-27159

Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favicon. This vulnerability allows attackers to access network resources and sensitive information via a crafted GET request.

EPSS: 0.770 (99.0th percentile) — read the EPSS interpretation.

Affected products

  • N/a — versions n/a

References