CVE-2024-55964

An issue was discovered in Appsmith before 1.52. An incorrectly configured PostgreSQL instance in the Appsmith image leads to remote command execution inside the Appsmith Docker container. The attacker must be able to access Appsmith, login to it, create a datasource, create a query against that datasource, and execute that query.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cve@mitre.org

Published

2025-03-26

Last modified

2025-03-27

Weaknesses

CWE-94

Affected products

• Appsmith (Appsmith)

References

• https://github.com/appsmithorg/appsmith/security/advisories/GHSA-m95x-4w54-gc83