appsmith
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 20 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 5, 2022 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Appsmith: SSRF via `POST /api/v1/admin/send-test-email` — JavaMail Bypasses WebClient IP Filter
Appsmith: Caddy admin API exposed without authentication
Appsmith: SSRF in REST API / GraphQL datasource plugins via insufficient host denylist
Appsmith: RCE via Supervisord XML-RPC Admin Interface Exposed via /supervisor Caddy Route
appsmithorg appsmith Dashboard WebClientUtils.java computeDisallowedHosts server-side request forgery
Appsmith < 1.98 Unauthenticated Instance Configuration Disclosure via Management APIs
Critical Stored XSS & Privilege Escalation in Appsmith
Appsmith public apps can execute unpublished actions (viewMode confusion)
Account Takeover Vulnerability in Appsmith
Monitor appsmith in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.