Skip to content
OpenAdvisories

Package · npm

strapi

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2022-27263

    Unrestricted Upload of File with Dangerous Type in Strapi

    An arbitrary file upload vulnerability in the file upload module of Strapi v4.1.5 allows attackers to execute arbitrary code via a crafted file.

    strapi npm
  • Critical 9.8
    CVE-2020-27664

    Authorization bypass in Strapi

    admin/src/containers/InputModalStepperProvider/index.js in Strapi before 3.2.5 has unwanted /proxy?url= functionality.

    strapi npm
  • Critical 9.8
    CVE-2019-18818 Public exploit Scanner template EPSS 97%

    Strapi allows unauthenticated attacker to reset admin password without valid reset token

    strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js.

    strapi npm