Filters
Software
npm/@strapi/strapiUnauthorized Access to Private Fields in User Registration API in strapi
7.6
First published (updated )
Strapi StrapiStrapi through 4.5.5 does not verify the access or ID tokens issued during the OAuth flow when the A…
7.5
First published (updated )
Strapi StrapiStrapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user de…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Strapi StrapiAn authenticated user with access to the Strapi admin panel can view private and sensitive data, suc…
7.5
First published (updated )
Strapi StrapiStoring passwords in a recoverable format in the DOCUMENTATION plugin component of Strapi before 3.6…
7.5
First published (updated )
Strapi StrapiArbitrary Command Injection in strapi/strapi
7.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Strapi StrapiIn Strapi through 3.6.0, the admin panel allows the changing of one's own password without entering …
8.1
First published (updated )
Strapi StrapiIn Strapi before 3.2.5, there is no admin::hasPermissions restriction for CTB (aka content-type-buil…
7.5
First published (updated )