1.1 에 영향을 주는 CVE
| CVE | 제목 | CVSS | 악용 | EPSS | 공개일 |
|---|---|---|---|---|---|
| CVE-2026-55454 | Appsmith: Caddy admin API exposed without authentication | 9.9 | — | 2026-06-24 | |
| CVE-2024-55964 | An issue was discovered in Appsmith before 1.52. An incorrectly configured PostgreSQL instance in the Appsmith... | 9.8 | — | 2025-03-26 | |
| CVE-2026-24042 | Appsmith public apps can execute unpublished actions (viewMode confusion) | 9.8 | — | 2026-01-22 | |
| CVE-2026-30862 | Critical Stored XSS & Privilege Escalation in Appsmith | 9.0 | — | 2026-03-10 | |
| CVE-2022-39824 | Server-side JavaScript injection in Appsmith through 1.7.14 allows remote attackers to execute arbitrary JavaS... | 8.9 | — | 2022-09-05 | |
| CVE-2026-50189 | Appsmith: RCE via Supervisord XML-RPC Admin Interface Exposed via /supervisor Caddy Route | 8.9 | — | 2026-06-24 | |
| CVE-2026-22794 | Account Takeover Vulnerability in Appsmith | 8.8 | — | 2026-01-12 | |
| CVE-2026-5418 | appsmithorg appsmith Dashboard WebClientUtils.java computeDisallowedHosts server-side request forgery | 6.9 | — | 2026-04-03 | |
| CVE-2026-34411 | Appsmith < 1.98 Unauthenticated Instance Configuration Disclosure via Management APIs | 6.9 | — | 2026-03-27 | |
| CVE-2022-4096 | Server-Side Request Forgery (SSRF) in appsmithorg/appsmith | 6.5 | — | 2022-11-21 | |
| CVE-2024-55965 | An issue was discovered in Appsmith before 1.51. Users invited as "App Viewer" incorrectly have access to deve... | 6.5 | — | 2025-03-26 | |
| CVE-2024-55963 | An issue was discovered in Appsmith before 1.51. A user on Appsmith that doesn't have admin permissions can tr... | 6.5 | — | 2025-03-26 | |
| CVE-2026-7299 | CVE-2026-7299 | 5.4 | — | 2026-06-02 | |
| CVE-2026-55455 | Appsmith: SSRF in REST API / GraphQL datasource plugins via insufficient host denylist | 5.3 | — | 2026-06-24 | |
| CVE-2026-49979 | Appsmith: SSRF via `POST /api/v1/admin/send-test-email` — JavaMail Bypasses WebClient IP Filter | 5.1 | — | 2026-06-24 | |
| CVE-2024-55604 | Appsmith's Broken Access Control Allows Viewer Role User to Query Datasources | 4.8 | — | 2025-03-25 |
내 서버의 버전을 직접 추적하세요
InfraGuard 는 모든 서버에 설치된 소프트웨어 버전을 수집하고, 알려진 취약점이 있는 버전을 알려 줍니다. 자체 호스팅이라 데이터가 내 네트워크를 벗어나지 않습니다.
데이터: CVE List(CVE® Program), NVD, CISA KEV, FIRST EPSS(EPSS 는 https://www.first.org/epss 참고), endoflife.date. 소프트웨어 목록: awesome-selfhosted(CC BY-SA 3.0).