Authorization bypass in Strapi

Description

References

• nvd.nist.gov/vuln/detail/CVE-2020-27664 · ADVISORY
• strapi/strapi#8442 · WEB
• strapi/strapi release v3.2.5 · WEB

strapi의 다른 취약점

• CVE-2026-57997보통 5.4Strapi users-permissions plugin fails to restrict JWT algorithms when plugin::users-permissions.jwt.algorithm is not explicitly configured, …
• CVE-2026-27886높음 7.5Strapi is an open source headless content management system. Strapi versions starting in 4.0.0 and prior to 5.37.0 did not sufficiently sani…
• CVE-2026-22707보통 5.4Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, the Upload plugin's Content API endpoints d…
• CVE-2026-22706보통 6.5Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, changing or resetting a user's password did…
• CVE-2026-22599높음 7.2Strapi is an open source headless content management system. In versions on the 4.x branch prior to 4.26.1 and on the 5.x branch prior to 5.…