appsmithorg vulnerabilities
10 published CVEs name appsmithorg among the affected products.
- 10Published CVEs10 of them scored
- 8Last 12 monthspublished in the last year
- 4Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-49979
Appsmith: SSRF via `POST /api/v1/admin/send-test-email` — JavaMail Bypasses WebClient IP Filter
appsmithorg · appsmith
Medium5.1 - CVE-2026-55454
Appsmith: Caddy admin API exposed without authentication
appsmithorg · appsmith
Critical9.9 - CVE-2026-55455
Appsmith: SSRF in REST API / GraphQL datasource plugins via insufficient host denylist
appsmithorg · appsmith
Medium5.3 - CVE-2026-50189
Appsmith: RCE via Supervisord XML-RPC Admin Interface Exposed via /supervisor Caddy Route
appsmithorg · appsmith
High8.9 - CVE-2026-5418
appsmithorg appsmith Dashboard WebClientUtils.java computeDisallowedHosts server-side request forgery
appsmithorg · appsmith
Medium6.9 - CVE-2026-30862
Critical Stored XSS & Privilege Escalation in Appsmith
appsmithorg · appsmith
Critical9.1 - CVE-2026-24042
Appsmith public apps can execute unpublished actions (viewMode confusion)
appsmithorg · appsmith
Critical9.4 - CVE-2026-22794
Account Takeover Vulnerability in Appsmith
appsmithorg · appsmith
Critical9.7 - CVE-2024-55604
Appsmith's Broken Access Control Allows Viewer Role User to Query Datasources
appsmithorg · appsmith
Medium4.8 - CVE-2022-4096
Server-Side Request Forgery (SSRF) in appsmithorg/appsmith
appsmithorg · appsmithorg/appsmith
High8.8