CVE-2022-25377
1 advisory.
Packagist/appwrite/server-ce CVE-2022-25377: high 7.5
Appwrite Directory Traversal vulnerability
Action: Upgrade appwrite/server-ce to 0.12.2 or later.
composer require appwrite/server-ce:0.12.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.5.0 | 0.12.2 | - |
Fixed versions
| 0.12.2 |
Sources
- osv: GHSA-wfm3-gq9h-mrjm
- https://nvd.nist.gov/vuln/detail/CVE-2022-25377
- https://github.com/appwrite/appwrite/pull/2780
- https://github.com/appwrite/appwrite/commit/892f6fa4ba0d44e2435ffad1a84542400cfb7a9b
- https://dubell.io/unauthenticated-lfi-in-appwrite-0.5.0-0.12.1
- https://github.com/appwrite/appwrite
- https://github.com/appwrite/appwrite/blob/0.12.0/app/controllers/general.php#L539
- https://github.com/appwrite/appwrite/releases/tag/0.12.2
CVE-2022-25377 · published · modified · JSON