Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
HIGH 7.5
CVE-2020-27665
In Strapi before 3.2.5, there is no admin::hasPermissions restriction for CTB (aka content-type-builder) routes.
Strapi
3.2.5+
MEDIUM 5.4
CVE-2020-27666
Strapi before 3.2.5 has stored XSS in the wysiwyg editor's preview feature.
Strapi
3.2.5+
MEDIUM 6.5
CVE-2020-13961
Strapi before 3.0.2 could allow a remote authenticated attacker to bypass security restrictions because templates are stored in a global variable wit…
Strapi
3.0.2+
HIGH 7.2
CVE-2019-19609EPSS 54%
The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin components of the Admin panel,…
Strapi
after 1.6.4
CRITICAL 9.8
CVE-2019-18818EPSS 98%
strapi before 3.0.0-beta.17.5 mishandles password resets within packages/strapi-admin/controllers/Auth.js and packages/strapi-plugin-users-permission…
Strapi
after 1.6.4