Vulnerabilities > Appsmith > Appsmith > 1.7.13

DATE CVE VULNERABILITY TITLE RISK
2022-11-21 CVE-2022-4096 Server-Side Request Forgery (SSRF) vulnerability in Appsmith
Server-Side Request Forgery (SSRF) in GitHub repository appsmithorg/appsmith prior to 1.8.2.
network
low complexity
appsmith CWE-918
6.5
6.5
2022-09-05 CVE-2022-39824 Cross-site Scripting vulnerability in Appsmith
Server-side JavaScript injection in Appsmith through 1.7.14 allows remote attackers to execute arbitrary JavaScript code from the server via the currentItem property of the list widget, e.g., to perform DoS attacks or achieve an information leak.
network
low complexity
appsmith CWE-79
8.9
8.9