Vulnerability record · CVE-2022-25377 · published 22 February 2024

CVE-2022-25377: Appwrite path traversal vulnerability

Appwrite · Appwrite

The ACME-challenge endpoint in Appwrite 0.5.0 through 0.12.x before 0.12.2 allows remote attackers to read arbitrary local files via ../ directory traversal. In order to be vulnerable, APP_STORAGE_CERTIFICATES/.well-known/acme-challenge must exist on disk. (This pathname is automatically created if the user chooses to install Let's Encrypt certificates via Appwrite.)

7.5 CVSS 3.1 High EPSS 0.79% · top 45.4% CWE-22 · Path traversal

7.5CVSS 3.1 base score

0.79%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

8References, 2 tagged exploit

17 Jun 2026Last modified by NVD

Description

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Appwrite Appwrite

References

Link	Tags
https://dubell.io/unauthenticated-lfi-in-appwrite-0.5.0-0.12.1/	Exploit
https://github.com/appwrite/appwrite/blob/0.12.0/app/controllers/general.php#L539	Product
https://github.com/appwrite/appwrite/pull/2780	Patch
https://github.com/appwrite/appwrite/releases/tag/0.12.2	Release Notes
https://dubell.io/unauthenticated-lfi-in-appwrite-0.5.0-0.12.1/	Exploit
https://github.com/appwrite/appwrite/blob/0.12.0/app/controllers/general.php#L539	Product
https://github.com/appwrite/appwrite/pull/2780	Patch
https://github.com/appwrite/appwrite/releases/tag/0.12.2	Release Notes

Track CVE-2022-25377 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2021-23682Appwrite prototype pollution vulnerabilityThis affects the package litespeed.js before 0.3.12; the package appwrite/server-ce from 0.12.0 and before 0.12.2, before 0.11.1. When parsing the qu…EPSS 2.1%16 Feb 2022 7.5CVE-2024-1063Appwrite server-side request forgery (ssrf) vulnerabilityAppwrite <= v1.4.13 is affected by a Server-Side Request Forgery (SSRF) via the '/v1/avatars/favicon' endpoint due to an incomplete fix of CVE-2023-2…EPSS 0.45%30 Jan 2024 7.5CVE-2023-27159Appwrite server-side request forgery (ssrf) vulnerabilityAppwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favicon. This vulnerability allows…EPSS 36%31 Mar 2023 5.4CVE-2022-2925Appwrite cross-site scripting vulnerabilityCross-site Scripting (XSS) - Stored in GitHub repository appwrite/appwrite prior to 1.0.0-RC1.EPSS 0.83%9 Sep 2022 9.8CVE-2026-93616Checkpoint multi-domain security management path traversal vulnerabilityA directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Managem…KEVEPSS 20%22 Sep 2026 10.0CVE-2026-85706GitLab CE/EE repository commits API path traversal allows unauthenticated file readGitLab CE/EE contains improper path confinement and missing authentication enforcement in the repository commits API, allowing an unauthenticated use…KEVEPSS 91%analysed12 Sep 2026 5.3CVE-2026-66384JFrog Artifactory path traversal in Docker cache pathAn authenticated user can write data outside the intended Docker cache path under specific remote-repository conditions in JFrog Artifactory. The fla…KEVEPSS 0.66%analysed12 Aug 2026 9.8CVE-2026-59310VMware vCenter Syslog server path traversal leads to RCEVMware vCenter's Syslog server is affected by a directory traversal flaw (CWE-22) that allows a remote, unauthenticated attacker to execute arbitrary…KEVEPSS 2.6%analysed30 Jul 2026

Source: NIST National Vulnerability Database (record CVE-2022-25377), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.