CVE-2024-55965

vendorUSosv

Advisory ansehen veröffentlicht 2025-03-26Lizenz: per source

An issue was discovered in Appsmith before 1.51. Users invited as "App Viewer" incorrectly have access to development information of a workspace (specifically, a list of datasources in a workspace they're a member of). This information disclosure does not expose sensitive data in the datasources, such as database passwords and API Keys.

beschreibt (1)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2024-55604US	medium4.3	0.25% (17th)	—	2025-03-25
Appsmith is a platform to build admin panels, internal tools, and dashboards. Users invited as "App Viewer" should not have access to development information of a workspace. Dataso…

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/55xxx/CVE-2024-55965.jsonADVISORY
https://github.com/appsmithorg/appsmith/security/advisories/GHSA-794x-gm8v-2wj6ADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2024-55965ADVISORY

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan