CVE-2024-55964
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Mar 26, 2025
Updated: Apr 1, 2025
CWE ID 94
Summary
CVE-2024-55964 is a newly discovered vulnerability affecting Appsmith before version 1.52. This issue arises from an incorrectly configured PostgreSQL instance within the Appsmith Docker container, enabling remote command execution. For an attacker to exploit this vulnerability, they must gain access to Appsmith, log in, create a datasource, craft a malicious query, and execute it.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.