Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

appsmithorg/appsmith

              release @ 4a30154
            

181

Fixes

CVEs

CRITICAL

Peak severity

43.2%

Coverage

Highlights

Auth Bypass: 59 prior fixes. Scrutinize any change in this area.

appsmith-server: most-fixed (10 issues). Treat as high-risk during review.

88 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Auth Bypass: Unauthenticated or low-privilege users could execute unpublished edit-mode (draft) actions by omitting or forcing viewMode=false in execution requests, leading to unauthorized backend query execution.

SSRF: Insufficient validation in outbound HTTP and redirection handlers allowed attackers to bypass superficial hostname checks and reach disallowed internal IP addresses (including 169.254.169.254 and container localhosts).

Cross-Site Scripting (XSS): The use of unsafe raw assignments via innerHTML and DOMParser context manipulation inside critical UI widgets allowed malicious user data to achieve full client-side administrative takeover.