An issue was discovered in Appsmith before 1.51. Users invited as "App Viewer" incorrectly have access to development information of a workspace (specifically, a list of datasources in a workspace they're a member of). This information disclosure does not expose sensitive data in the datasources, such as database passwords and API Keys.
Metrics
Affected Vendors & Products
References
History
Wed, 26 Mar 2025 20:30:00 +0000
Type | Values Removed | Values Added |
---|---|---|
Description | An issue was discovered in Appsmith before 1.51. Users invited as "App Viewer" incorrectly have access to development information of a workspace (specifically, a list of datasources in a workspace they're a member of). This information disclosure does not expose sensitive data in the datasources, such as database passwords and API Keys. | |
References |
|

Status: PUBLISHED
Assigner: mitre
Published: 2025-03-26T00:00:00.000Z
Updated: 2025-03-26T20:12:18.796Z
Reserved: 2024-12-13T00:00:00.000Z
Link: CVE-2024-55965

No data.

Status : Received
Published: 2025-03-26T21:15:23.063
Modified: 2025-03-26T21:15:23.063
Link: CVE-2024-55965

No data.