Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favicon. This vulnerability allows attackers to access network resources and sensitive information via a crafted GET request.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| appwrite/server-ce(Packagist) | 0 | N/A | N/A |
CVSS Metrics
