CVE-2024-55963
60Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.
ssvc Actcvss 6.5epss 28%
from disclosure to weapon8 days
Published on NVDMar 26
1st PoC+8d
VulnCheck+264d
exploitation probability
28%top 2% of all CVEs
observed exploitation
yesVulnCheck
3 public exploit(s)
An issue was discovered in Appsmith before 1.51. A user on Appsmith that doesn't have admin permissions can trigger the restart API on Appsmith, causing a server restart. This is still within the Appsmith container, and the impact is limited to Appsmith's own server only, but there is a denial of service because it can be continually restarted. This is due to incorrect access control checks, which should check for super user permissions on the incoming request.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
n/a · n/apublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/52118unverifiedgithubgithub.com/superswan/CVE-2024-55963★ 2vulncheckvulncheck.com/xdb/879f3123a556unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.