Authorization bypass in Strapi

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-27664 · ADVISORY
• strapi/strapi#8442 · WEB
• strapi/strapi release v3.2.5 · WEB

strapi のその他の脆弱性

• CVE-2026-57997中 5.4Strapi users-permissions plugin fails to restrict JWT algorithms when plugin::users-permissions.jwt.algorithm is not explicitly configured, …
• CVE-2026-27886高 7.5Strapi is an open source headless content management system. Strapi versions starting in 4.0.0 and prior to 5.37.0 did not sufficiently sani…
• CVE-2026-22707中 5.4Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, the Upload plugin's Content API endpoints d…
• CVE-2026-22706中 6.5Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, changing or resetting a user's password did…
• CVE-2026-22599高 7.2Strapi is an open source headless content management system. In versions on the 4.x branch prior to 4.26.1 and on the 5.x branch prior to 5.…