CVE-2024-55963
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Mar 26, 2025
Updated: Apr 1, 2025
CWE ID 284
Summary
CVE-2024-55963 is a vulnerability affecting Appsmith before version 1.51. It enables non-admin users to initiate server restarts through the API, leading to denial-of-service conditions. The issue arises due to inadequate access control checks, which should have verified super user permissions on incoming requests before granting restart access. This vulnerability is contained within Appsmith's own server, but repeated restarts can cause service disruptions.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.