CVE-2024-1063

Name of the Vulnerable Software and Affected Versions Appwrite versions prior to v1.4.14

Description The issue is related to a Server-Side Request Forgery (SSRF) that can be exploited via the "/v1/avatars/favicon" endpoint. This is due to an incomplete fix of a previously identified issue.

Recommendations For versions prior to v1.4.14, update to version v1.4.14 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/v1/avatars/favicon" endpoint until a patch is applied.