{"metadata": {"vulnerability": "cve-2026-108770", "count": 16, "kinds": {"milestone": 4, "sighting": 1, "kev": 0, "other": 11}}, "data": [{"timestamp": "2026-10-11T00:00:00Z", "date_only": false, "value": "2026-10-11T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-108770", "field": "containers.cna.timeline.0.time"}, {"timestamp": "2026-10-11T02:00:00Z", "date_only": false, "value": "2026-10-11T02:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-108770", "field": "containers.cna.timeline.1.time"}, {"timestamp": "2026-10-11T07:23:33.337Z", "date_only": false, "value": "2026-10-11T07:23:33.337Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2026-108770", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-11T09:28:38Z", "date_only": false, "value": "2026-10-11T09:28:38.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / VulDB", "record": "cve-2026-108770", "field": "containers.cna.timeline.2.time"}, {"timestamp": "2026-10-11T22:15:24.426Z", "date_only": false, "value": "2026-10-11T22:15:24.426Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2026-108770", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-11T22:15:24.426Z", "date_only": false, "value": "2026-10-11T22:15:24.426Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / VulDB", "record": "cve-2026-108770", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-11T22:30:19.854Z", "date_only": false, "value": "2026-10-11T22:30:19.854192Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117424640454991956", "record": "CVE-2026-108770", "field": "creation_timestamp", "uuid": "575ee736-7b13-461b-9923-cf56417634f3", "content": "CVE-2026-108770 Appwrite Browser Screenshot Service Get.php PublicHostname server-side request forgery A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation of the argument url causes server-side request forgery. The attack can be initiated remotely. Upgrading to version 2.4.0 is able to resolve this issue. Patch name: 393255e7302ae5503331d45802e2eee01c6a47fe. You should upgrade the affected component.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108770https://vuldb.com/vuln/416552https://vuldb.com/vuln/416552/ctihttps://vuldb.com/cve/CVE-2026-108770https://vuldb.com/submit/958017https://github.com/godzeo/vulhub/issues/2https://github.com/appwrite/appwrite/pull/13995https://github.com/appwrite/appwrite/commit/393255e7302ae5503331d45802e2eee01c6a47fehttps://github.com/appwrite/appwrite/releases/tag/2.4.0https://github.com/appwrite/appwrite/#CVE_2026_108770#bot", "url": "https://infosec.exchange/users/cve/statuses/117424640454991956"}, {"timestamp": "2026-10-11T23:16:56Z", "date_only": false, "value": "2026-10-11T23:16:56Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-CFW6-H8VP-H745", "record": "GHSA-CFW6-H8VP-H745", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-11T23:16:56.543Z", "date_only": false, "value": "2026-10-11T23:16:56.543", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108770", "record": "FKIE_CVE-2026-108770", "field": "published"}, {"timestamp": "2026-10-12T00:30:23Z", "date_only": false, "value": "2026-10-12T00:30:23Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-CFW6-H8VP-H745", "record": "GHSA-CFW6-H8VP-H745", "field": "published"}, {"timestamp": "2026-10-12T00:30:23Z", "date_only": false, "value": "2026-10-12T00:30:23Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-CFW6-H8VP-H745", "record": "GHSA-CFW6-H8VP-H745", "field": "modified"}, {"timestamp": "2026-10-13T13:55:59.056Z", "date_only": false, "value": "2026-10-13T13:55:59.056204Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-108770", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-13T13:55:59.056Z", "date_only": false, "value": "2026-10-13T13:55:59.056204Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108770", "record": "FKIE_CVE-2026-108770", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-13T13:56:26.192Z", "date_only": false, "value": "2026-10-13T13:56:26.192Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2026-108770", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-13T13:56:26.192Z", "date_only": false, "value": "2026-10-13T13:56:26.192Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2026-108770", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T14:17:21.107Z", "date_only": false, "value": "2026-10-13T14:17:21.107", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-108770", "record": "FKIE_CVE-2026-108770", "field": "lastModified"}]}