CVE-2023-50974

Summary

CVE-2023-50974 is a vulnerability affecting Appwrite CLI versions prior to 3.0.0. The issue lies in the handling of user credentials. When using the login command, the Appwrite user's credentials are saved in a ~/.appwrite/prefs.json file with permissive UNIX permissions of 0644. Consequently, any local user can access these sensitive credentials, potentially leading to unauthorized access to the Appwrite application. This vulnerability poses a significant risk and requires immediate attention for those using affected versions of Appwrite CLI.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.