← Database

CVE-2024-51408

HIGH CVSS: 8.5 Published: 2024-11-04 Modified: 2026-06-17

Description

AppSmith Community 1.8.3 before 1.46 allows SSRF via New DataSource for application/json requests to 169.254.169.254 to retrieve AWS metadata credentials.

Affected Platforms

Appsmith Appsmith

Weakness Type

CWE-918, CWE-918

References