GHSA-g777-crp9-m27gMediumCVSS 5.5

Apprite CLI makes Use of Hard-coded Credentials

Published
January 9, 2024
Last Modified
September 13, 2024

🔗 CVE IDs covered (1)

CVE-2023-50974 →

📋 Description

In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials.

🎯 Affected products2

  • npm/appwrite-cli:< 3.0.0
  • pip/appwrite:>= 0, < 3.0.0

🔗 References (5)