Vulnerabilities in appwrite

2 results
CVE-2022-2925CRITICALCross-site Scripting (XSS) - Stored in appwrite/appwriteEPSS 0.7%CVE-2024-1063MEDIUMAppwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of CEPSS 0.4%