CVE-2024-55965: Appsmith

Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in Appsmith before 1.51. Users invited as "App Viewer" incorrectly have access to development information of a workspace (specifically, a list of datasources in a workspace they're a member of). This information disclosure does not expose sensitive data in the datasources, such as database passwords and API Keys.

Affected products

• Appsmith Appsmith: before 1.51 (fixed in 1.51)

Published 2025-03-26. Last modified 2026-06-17.