CVE-2023-50974

PoC —

CVSS 3.1

5.5 medium

EPSS

<1%p22

Published

Jan 9, 2024 (Jan 9, 2024)

Modified

Jun 17, 2026

Description

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials.

Vendors: appwrite
Products: command line interface
Weakness: CWE-798
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.