Vulnerability CVE-2022-38299


Published: 2022-09-12   Modified: 2022-09-13

Description:
An issue in the Elasticsearch plugin of Appsmith v1.7.11 allows attackers to connect disallowed hosts to the AWS/GCP internal metadata endpoint.

 References:
https://github.com/appsmithorg/appsmith/pull/15834

Copyright 2026, cxsecurity.com

 

Back to Top