https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 16:44:21 +0000 https://cve.radiocsirt.org/vuln/cve-2024-55604 <p><strong>Affected:</strong> appsmithorg appsmith</p> <p>Appsmith is a platform to build admin panels, internal tools, and dashboards. Users invited as &#34;App Viewer&#34; should not have access to development information of a workspace. Datasources are such a component in a workspace. Yet, in versions of Appsmith prior to 1.51, app viewers are able to get a list of datasources in a workspace they&#39;re a member of. This information disclosure does NOT expose sensitive data in the datasources, such as database passwords and API Keys. The attacker needs to have been invited to a workspace as a &#34;viewer&#34;, by someone in that workspace with access to invite. The attacker then needs to be able to signup/login to that Appsmith instance. The issue is patched in version 1.51. No known workarounds are available.</p> <p><strong>Affected:</strong> appsmithorg appsmith</p> <p>Appsmith is a platform to build admin panels, internal tools, and dashboards. Users invited as &#34;App Viewer&#34; should not have access to development information of a workspace. Datasources are such a component in a workspace. Yet, in versions of Appsmith prior to 1.51, app viewers are able to get a list of datasources in a workspace they&#39;re a member of. This information disclosure does NOT expose sensitive data in the datasources, such as database passwords and API Keys. The attacker needs to have been invited to a workspace as a &#34;viewer&#34;, by someone in that workspace with access to invite. The attacker then needs to be able to signup/login to that Appsmith instance. The issue is patched in version 1.51. No known workarounds are available.</p> https://cve.radiocsirt.org/vuln/cve-2024-55604