Skip to content
OpenAdvisories

Archive

19 April 2023

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.2
    CVE-2023-22894 Exploited Public exploit

    Strapi leaking sensitive user information by filtering on private fields

    Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitive information and infer a value from API responses. If the …

    KEV Oct 8, 2026