strapi-plugin-content-type-builder

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.5

CVE-2020-27665

Improper Authorization in Strapi

In Strapi before 3.2.5, there is no admin::hasPermissions restriction for CTB (aka content-type-builder) routes.

strapi-plugin-content-type-builder npm

Oct 22, 2020