Description
admin/src/containers/InputModalStepperProvider/index.js in Strapi before 3.2.5 has unwanted /proxy?url= functionality.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | strapi | < 3.2.5 | 3.2.5 | GHSA-7frv-9phw-vrvr |
Critical · 9.8
CVE-2020-27664
EUVD-2021-0997GHSA-7frv-9phw-vrvr
Authorization bypass in Strapi
Published Oct 22, 2020 · Updated Aug 4, 2024 · Assigned by mitre