CVE-2022-31367

Published
View on NVD ↗
CVSS v3
8.8
HIGH
CVSS v2
N/A
Affected
2
PROJECTS

Description

Strapi before 3.6.10 and 4.x before 4.1.10 mishandles hidden attributes within admin API responses.

strapi/strapi
strapi/strapi
🚀 Strapi is the leading open-source headless CMS. It’s 100% JavaScript/TypeScript, fully customizable, and developer-first.
GitHubGitHub
72.3K
kos0ng/CVEs
kos0ng/CVEs
Repository regarding my security research
GitHubGitHub
5