CVSS 3.1
5.5 mediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NCVE-2023-50974
Medium (5.5) in appwrite command line interface. EPSS 0.3% chance of exploitation in the next 30 days. Fixed in appwrite-cli 3.0.0.
In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system can access those credentials.
Severity
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 21% of CVEs (scores of 2026-10-31)
- CWE
- CWE-798
- Published
- Modified
- Record from
- the NVD, synced
Affected
- appwrite:command_line_interface
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-g777-crp9-m27g | npm | appwrite-cli | <3.0.0 | 3.0.0 |
| GHSA-g777-crp9-m27g | PyPI | appwrite | <3.0.0 | 3.0.0 |
| PYSEC-2024-2 | PyPI | appwrite | <3.0.0 | 3.0.0 |