CVE-2023-27159

Published: 2023-03-31T19:15Z

Last Modified: 2025-02-18T15:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favicon. This vulnerability allows attackers to access network resources and sensitive information via a crafted GET request. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt