Skip to content
OpenAdvisories

Archive

13 July 2022

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 4.6
    CVE-2022-32114 Public exploit

    Strapi 4.1.12 Cross-site Scripting via crafted file

    An unrestricted file upload vulnerability in the Add New Assets function of Strapi 4.1.12 allows attackers to conduct XSS attacks via a crafted PDF file. NOTE: the project documentation suggests that a user with the Media Library "Create (upload)" permission …