Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2023-50974

EPSS 0.03% · P9
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2023-50974

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Appwrite 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Appwrite是Appwrite开源的一个端到端的后端服务器。用于打包为一组 Docker 微服务的 Web、移动、本机或后端应用程序。 Appwrite CLI 3.0.0 之前版本存在安全漏洞，该漏洞源于当使用登录命令时，Appwrite 用户的凭据存储在 prefs.json 文件中，权限为 0644 ，任何用户都可以访问这些凭据。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2023-50974

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-50974

请登录查看更多情报信息。

Same Patch Batch · n/a · 2024-01-09 · 30 CVEs total

CVE-2023-509328.3 HIGHsavignano S/Notify 安全漏洞
CVE-2023-509318.3 HIGHsavignano S/Notify 安全漏洞
CVE-2023-509308.3 HIGHsavignano S/Notify 安全漏洞
CVE-2024-03527.3 HIGHLikeshop HTTP POST Request File.php userFormImage unrestricted upload
CVE-2024-03426.3 MEDIUMInis Sqlite.php sql injection
CVE-2024-03413.5 LOWInis GET Request File.php path traversal
CVE-2023-49237TRENDnet TV-IP1314PI 安全漏洞
CVE-2023-47997FreeImage 安全漏洞
CVE-2023-47996FreeImage 安全漏洞
CVE-2023-47995FreeImage 安全漏洞
CVE-2023-50136JFinalCMS 安全漏洞
CVE-2023-47994FreeImage 安全漏洞
CVE-2023-47993FreeImage 安全漏洞
CVE-2023-47992FreeImage 安全漏洞
CVE-2023-38827Follet School Solutions Destiny 安全漏洞
CVE-2022-28975Infoblox NIOS 跨站脚本漏洞
CVE-2024-22368Spreadsheet::ParseXLSX 安全漏洞
CVE-2023-50585Tenda A18 安全漏洞
CVE-2023-27000NetScout nGeniusONE 跨站脚本漏洞
CVE-2023-49236TRENDnet TV-IP1314PI 安全漏洞

Showing top 20 of 30 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2023-50974

No comments yet

Leave a comment