CVE-2022-38298

Appsmith v1.7.11 was discovered to allow attackers to execute an authenticated Server-Side Request Forgery (SSRF) via redirecting incoming requests to the AWS…

published September 12, 2022

CVSS
—
EPSS
1%
Percentile
54.1
In the wild
Unconfirmed
What it is

Appsmith v1.7.11 was discovered to allow attackers to execute an authenticated Server-Side Request Forgery (SSRF) via redirecting incoming requests to the AWS internal metadata endpoint.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00742 · 54.1th percentile
Published
2022-09-12T21:49Z
EPSS history
Timeline
  • 12 SEP 21:49Z
    Appsmith v1.7.11 was discovered to allow attackers to execute an authenticated Server-Side Request Forgery (SSRF) via redirecting incoming requests to the AWS…
    cvelistv5