CVE-2022-38299

MEDIUM CVSS: 4.3 Published: 2022-09-12 Modified: 2026-06-17

Description

An issue in the Elasticsearch plugin of Appsmith v1.7.11 allows attackers to connect disallowed hosts to the AWS/GCP internal metadata endpoint.

Affected Platforms

Appsmith Appsmith

Weakness Type

NVD-CWE-noinfo

References