CVE-2024-55963 Missing authorization in n/a
Non-admin users can trigger server restarts in Appsmith, causing a denial of service due to missing authorization checks.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-55963?
CVE-2024-55963 is a medium-severity missing authorization vulnerability in n/a, published on 26 Mar 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
An issue was discovered in Appsmith before 1.51. A user on Appsmith that doesn't have admin permissions can trigger the restart API on Appsmith, causing a server restart. This is still within the Appsmith container, and the impact is limited to Appsmith's own server only, but there is a denial of service because it can be continually restarted. This is due to incorrect access control checks, which should check for super user permissions on the incoming request.
Weakness: CWE-284
Which versions are affected by CVE-2024-55963?
1 open source package ship an affected version, including appsmith. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
appsmith Bitnami | All versions | 1.51.0 |
Products include Appsmith Appsmith.
How do I fix CVE-2024-55963?
Upgrade appsmith to 1.51.0 or later.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2024-55963 being exploited?
There is no known exploitation of CVE-2024-55963 in the wild and no public exploit code.
Public exploit code: 1 Exploit-DB entry and 1 proofs of concept on GitHub.
Other vulnerabilities in n/a
- CVE-2026-55454 Appsmith: Caddy admin API exposed without authentication
- CVE-2024-55964 Code injection in n/a
- CVE-2026-22794 Account Takeover Vulnerability in Appsmith
- CVE-2026-24042 Appsmith public apps can execute unpublished actions (viewMode confusion)
- CVE-2026-30862 Critical Stored XSS & Privilege Escalation in Appsmith
Sources
Also known as BIT-appsmith-2024-55963, GHSA-6mc8-hw5c-7qqr.