Description
The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Strapi | Strapi Open Source and Enterprise Headless CMS | 5.51.0 | — |