Skip to content
OpenAdvisories

Package · npm

@strapi/admin

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.9
    CVE-2024-52588

    Strapi allows Server-Side Request Forgery in Webhook function

    Strapi is an open-source content management system. Prior to version 4.25.2, inputting a local domain into the Webhooks URL field leads to the application fetching itself, resulting in a server side request forgery (SSRF). This issue has been patched in versi…

    strapi strapi @strapi/admin npm
  • Medium 5.8
    CVE-2023-36472

    Strapi may leak sensitive user information, user reset password, tokens via content-manager views

    Strapi is an open-source headless content management system. Prior to version 4.11.7, an unauthorized actor can get access to user reset password tokens if they have the configure view permissions. The `/content-manager/relations` route does not remove privat…

    strapi strapi @strapi/admin @strapi/utils npm