Strapi vulnerabilities

Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.

5 matching records

Medium4.9Strapi Cleartext Storage of Sensitive Information VulnerabilityVuln · CVE-2023-22894 · Strapi · Strapi · CISA Cybersecurity Advisories · CISA KEV · CVE.org · StrapiPatch nowKEVEPSS 4.11%Apr 19, 2023
Critical10.0Strapi Strapi Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Vuln · CVE-2023-22621 · strapi · strapi · CVE.org · FIRST EPSS · Maintainer security tabs · npm, StrapiPatch nowKEVEPSS 70.60%Apr 18, 2023
High8.2Strapi Strapi Improper AuthenticationVuln · CVE-2023-22893 · strapi · strapi · CVE.org · FIRST EPSS · Maintainer security tabs · npm, StrapiPatch nowKEVEPSS 4.12%Apr 18, 2023
High7.2Strapi Strapi Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')Vuln · CVE-2019-19609 · strapi · strapi · CVE.org · FIRST EPSS · Exploit Database · StrapiPatch nowKEVEPSS 54.08%Dec 5, 2019
Critical9.8Strapi Strapi Weak Password Recovery Mechanism for Forgotten PasswordVuln · CVE-2019-18818 · strapi · strapi · CVE.org · FIRST EPSS · Exploit Database · StrapiPatch nowKEVEPSS 97.64%Nov 7, 2019

Sort