EUVD-2026-18518Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V4 - API and Web Service URL allowlisting, SSRF prevention
MITRE ATT&CK
2 techniques across 2 tactics: Initial Access, Credential Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Impact | CVSS 6.9 with vector AV:N/AC:L/PR:N indicates remote, unauthenticated attack with low complexity and moderate impact (confidentiality, integrity, and availability all rated low). The CVSS:4.0 vector shows E:P (exploit maturity: proof-of-concept), confirming publicly available code but not necessarily in-the-wild exploitation. No CISA KEV status is provided, so active exploitation beyond POC demonstrations is unconfirmed. The combination of network-accessible attack surface (AV:N), no authentication required (PR:N), public exploit availability, and SSRF's utility in lateral movement and information disclosure warrants prioritization despite the moderate CVSS score. Organizations should treat this as a high-priority remediation target, particularly if Appsmith instances are internet-facing or operate in zero-trust environments where SSRF could enable compromise of downstream services. |
| Exploit ScenarioDerived | An unauthenticated attacker discovers a publicly exposed Appsmith Dashboard instance and crafts a malicious request targeting the computeDisallowedHosts function with a specially formatted URL parameter designed to bypass host validation. The attack exploits insufficient filtering to redirect the server's outbound connection to an internal service such as a cloud metadata endpoint (AWS IMDSv1), internal API, or database server. The server processes the request with its own network privileges, allowing the attacker to extract credentials, configuration data, or trigger unauthorized state changes on backend systems. Publicly available exploit code from GitHub repositories enables rapid weaponization by lower-skilled threat actors. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Apr 02, 2026
Server-side request forgery (SSRF) in Appsmith Dashboard component allows unauthenticated remote attackers to manipulate the computeDisallowedHosts function in WebClientUtils.java, enabling unauthorized server-side requests. Affecting all versions through 1.97, this vulnerability carries moderate real-world risk (CVSS 6.9, EPSS P) with publicly available exploit code. Vendor released patched version 1.99 and responded professionally to early disclosure.
RemediationAI
Vendor-released patch: upgrade Appsmith to version 1.99 or later. Organizations should prioritize this upgrade immediately given the public exploit availability and low attack complexity. For environments unable to upgrade immediately, network segmentation and firewall rules restricting outbound connections from Appsmith instances to internal services can reduce attack surface, though such controls do not address the underlying vulnerability. Review GitHub Security Advisory GHSA-9m89-5jw7-q5cr at https://github.com/appsmithorg/appsmith/security/advisories/GHSA-9m89-5jw7-q5cr for comprehensive remediation guidance and to verify local instance versions.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability resides in the WebClientUtils.java component within Appsmith's Dashboard functionality, specifically in the computeDisallowedHosts function responsible for validating and restricting outbound HTTP requests from the server. SSRF vulnerabilities (CWE-918) occur when insufficient validation of user-controlled input in URL parameters allows attackers to craft requests that bypass intended access controls, enabling the server to make requests to internal resources, local network services, or cloud metadata endpoints that should be unreachable. In Appsmith's case, the improper filtering of disallowed hosts allows an attacker to construct specially crafted payloads that circumvent the allowlist/blocklist mechanism, granting unauthorized access to backend services or internal systems the dashboard should not contact.
Know when Appsmith gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability was identified in appsmithorg appsmith up to 1.97. Impacted is the function computeDisallowedHosts of the file app/server/appsmith-interfaces/src/main/java/com/appsmith/util/WebClientUtils.java of the component Dashboard. Such manipulation leads to server-side request forgery. The attack may be launched remotely. The exploit is publicly available and might be used. Upgrading to version 1.99 is recommended to address this issue. The affected component should be upgraded. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
GitHub
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Server-Side Request Forgery exploits applications that fetch remote resources based on user-supplied URLs.
An issue was discovered in Appsmith before 1.52. Rated critical severity (CVSS 9.8), this vulnerability is remotely expl
Appsmith before 1.93 allows attackers to control the Origin header value used as the base URL in password reset and emai
Server-side JavaScript injection in Appsmith through 1.7.14 allows remote attackers to execute arbitrary JavaScript code
AppSmith Community 1.8.3 before 1.46 allows SSRF via New DataSource for application/json requests to 169.254.169.254 to
Server-Side Request Forgery (SSRF) in GitHub repository appsmithorg/appsmith prior to 1.8.2. Rated medium severity (CVSS
Reverse-proxy takeover in Appsmith versions prior to 2.1 lets an authenticated low-privileged user abuse server-side req
Appsmith platform version 1.94 and below has a missing authorization vulnerability that allows unauthenticated access to
Stored XSS in Appsmith's SQL query editor autocomplete allows an authenticated Developer-role user to inject persistent
Appsmith platform prior to version 1.96 has a critical stored XSS enabling account takeover through crafted admin panel
Authenticated command execution in Appsmith versions prior to 2.1 lets any administrator run arbitrary OS commands insid
Appsmith v1.7.11 was discovered to allow attackers to execute an authenticated Server-Side Request Forgery (SSRF) via re
Appsmith versions prior to 1.98 allow unauthenticated remote attackers to access sensitive instance management API endpo
Exploit-DB