Skip to content
OpenAdvisories

Package · npm

strapi

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2019-18818 Public exploit Scanner template EPSS 97%

    Strapi allows unauthenticated attacker to reset admin password without valid reset token

    strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permissions/controllers/Auth.js.

    strapi npm