CVE-2021-46440: High severity strapi vulnerability
Storing passwords in a recoverable format in the DOCUMENTATION plugin component of Strapi before 3.6.9 and 4.x before 4.1.5 allows an attacker to access a victim's HTTP request, get the victim's cookie, perform a base64 decode on the victim's cookie, and obtain a cleartext password, leading to getting API documentation for further API attacks.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-46440.
What is the severity of CVE-2021-46440?
The severity of CVE-2021-46440 is high with a severity value of 7.5.
Which software versions are affected by CVE-2021-46440?
The DOCUMENTATION plugin component of Strapi before 3.6.9 and 4.x before 4.1.5 is affected by CVE-2021-46440.
How does CVE-2021-46440 allow an attacker to access a victim's password?
CVE-2021-46440 allows an attacker to access a victim's password by performing a series of actions involving the victim's HTTP request and cookie.
Are there any references for CVE-2021-46440?
Yes, the following references provide more information about CVE-2021-46440: [1] http://packetstormsecurity.com/files/166915/Strapi-3.6.8-Password-Disclosure-Insecure-Handling.html, [2] https://github.com/strapi/strapi/pull/12246, [3] https://hub.docker.com/r/strapi/strapi