Skip to content
OpenAdvisories

Package · npm

strapi

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.8
    CVE-2022-29894

    Cross-site Scripting in Strapi

    Strapi v3.x.x versions and earlier contain a stored cross-site scripting vulnerability in file upload function. By exploiting this vulnerability, an arbitrary script may be executed on the web browser of the user who is logging in to the product with the admi…

    strapi strapi strapi npm
  • Medium 6.1
    CVE-2022-0764

    Arbitrary Command Injection in strapi/strapi

    Arbitrary Command Injection in GitHub repository strapi/strapi prior to 4.1.0.

    strapi strapi/strapi strapi npm
  • Medium 6.5
    CVE-2020-13961

    Improper Input Validation in strapi

    Strapi before 3.0.2 could allow a remote authenticated attacker to bypass security restrictions because templates are stored in a global variable without any sanitation. By sending a specially crafted request, an attacker could exploit this vulnerability to u…

    strapi npm