CVE-2022-38298: SSRF
Published Sep 12, 2022
·Updated
Appsmith v1.7.11 was discovered to allow attackers to execute an authenticated Server-Side Request Forgery (SSRF) via redirecting incoming requests to the AWS internal metadata endpoint.
Affected Software
1 affected component
AppSmith Appsmith=1.7.11
Remediation
Patch Available
Event History
Sep 12, 2022
CVE Published
via MITRE·09:49 PM
Data Sourced
via MITRE·09:49 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-38298?
CVE-2022-38298 has been classified with a moderate to high severity due to its potential for SSRF exploitation.
2
How do I fix CVE-2022-38298?
To fix CVE-2022-38298, update Appsmith to version 1.7.12 or later where this vulnerability has been addressed.
3
What type of vulnerability is CVE-2022-38298?
CVE-2022-38298 is categorized as a Server-Side Request Forgery (SSRF) vulnerability.
4
What could an attacker achieve with CVE-2022-38298?
An attacker exploiting CVE-2022-38298 could redirect requests to the AWS internal metadata endpoint, potentially exposing sensitive data.
5
Which versions of Appsmith are affected by CVE-2022-38298?
CVE-2022-38298 affects Appsmith version 1.7.11.