Skip to content
OpenAdvisories
Medium · 4.9 CVE-2020-8123 EUVD-2021-2416GHSA-23fp-fmrv-f5px

Uncontrolled Resource Consumption in strapi

Published Feb 4, 2020 · Updated Aug 4, 2024 · Assigned by hackerone

Description

A denial of service exists in strapi v3.0.0-beta.18.3 and earlier that can be abused in the admin console using admin rights can lead to arbitrary restart of the application.

Affected products

VendorProductAffectedFixed
— Strapi v3.0.0-beta.18.4 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm strapi-admin < 3.0.0-beta.18.4 3.0.0-beta.18.4 GHSA-23fp-fmrv-f5px

References