Every CVE Search/ Get API key

CVE-2023-2479

OS Command Injection in appium/appium-desktop

9.8 Critical

OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

22.0%Up 22.0 points since May 3, 2023
90%50%10%1%

What each source reports

CVE List Score used 9.8

OS Command Injection in appium/appium-desktop

OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4.

Record
CVE-2023-2479
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02
EUVDEUVD-2023-1653 9.8

OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4.

Record
EUVD-2023-1653
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-xq6j-x8pq-g3gr 9.8

appium-desktop OS Command Injection vulnerability

appium-desktop v1.14.1 and prior is vulnerable to OS Command Injection.

Record
GHSA-xq6j-x8pq-g3gr
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02
NVD 9.8

OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4.

Record
CVE-2023-2479
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02
OSV 9.8

OS Command Injection in appium/appium-desktop

OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4.

Record
CVE-2023-2479
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02
OSVGHSA-xq6j-x8pq-g3gr 9.8

appium-desktop OS Command Injection vulnerability

appium-desktop v1.14.1 and prior is vulnerable to OS Command Injection.

Record
GHSA-xq6j-x8pq-g3gr
CVSS 3.0
9.8 CriticalCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
appium-desktop
npm
 through 1.14.1 None known

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
NucleiAppium Desktop Server - Remote Code Execution

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, Nuclei, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-2479 is a critical vulnerability (CVSS 9.8) in Appium Appium-desktop, published May 2, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 22.0%, the 97th percentile. No source names a fixed version.

References

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open