SecNews@SecNews_GR
CVE-2026-108770: Το Appwrite 2.4.0 διορθώνει μια ευπάθεια SSRF https://www.secnews.gr/739629/appwrite-cve-2026-108770-ssrf/?fsp_sid=18199
00000129
7.0K followersView on X
CVE-2026-108770
LOWCVSS 6.9 · MEDIUMSignal is active with 1 mentions in latest observed window
Immediate actions
- Track advisory updates for patch or workaround availability
Recommended action window: Monitor and triage in normal cycle
NVD description
A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation of the argument url causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is able to resolve this issue. Patch name: 393255e7302ae5503331d45802e2eee01c6a47fe. You should upgrade the affected component.
0.0/ 10 priority
Sources & remediation
Other references
Weakness type (CWE)
CWE-918
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
Threat summary
- 1 mentions across 1 observed day
What's happening
- 1 total mentions across 1 day