cve/2023/CVE-2023-50974.md
2024-05-25 21:48:12 +02:00

690 B

CVE-2023-50974

Description

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials.

POC

Reference

No PoCs from references.

Github