Unrestricted Upload of File with Dangerous Type in Strapi

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-27263 · ADVISORY
• strapi/strapi · PACKAGE
• youtube.com/watch · WEB

strapi의 다른 취약점

• CVE-2026-57997보통 5.4Strapi users-permissions plugin fails to restrict JWT algorithms when plugin::users-permissions.jwt.algorithm is not explicitly configured, …
• CVE-2026-27886높음 7.5Strapi is an open source headless content management system. Strapi versions starting in 4.0.0 and prior to 5.37.0 did not sufficiently sani…
• CVE-2026-22707보통 5.4Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, the Upload plugin's Content API endpoints d…
• CVE-2026-22706보통 6.5Strapi is an open source headless content management system. In Strapi versions prior to 5.33.3, changing or resetting a user's password did…
• CVE-2026-22599높음 7.2Strapi is an open source headless content management system. In versions on the 4.x branch prior to 4.26.1 and on the 5.x branch prior to 5.…