CVE-2022-38298: Appsmith

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

Appsmith v1.7.11 was discovered to allow attackers to execute an authenticated Server-Side Request Forgery (SSRF) via redirecting incoming requests to the AWS internal metadata endpoint.

Affected products

• Appsmith Appsmith: version 1.7.11 only

Published 2022-09-12. Last modified 2026-06-17.