Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-32114

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-4vm8-j95f-j6v5

Strapi 4.1.12 Cross-site Scripting via crafted file An unrestricted file upload vulnerability in the Add New Assets function of Strapi v4.1.12 allows attackers to execute arbitrary code via a crafted file. After an authenticated attacker uploads a file containing a malicious URL, a victim copies and pastes the malicious URL into a new tab to receive the XSS payload.

gitlab/npm/strapi/CVE-2022-32114

Unrestricted Upload of File with Dangerous Type An unrestricted file upload vulnerability in the Add New Assets function of Strapi v4.1.12 allows attackers to execute arbitrary code via a crafted file.

gitlab/npm/@strapi/strapi/CVE-2022-32114

Unrestricted Upload of File with Dangerous Type An unrestricted file upload vulnerability in the Add New Assets function of Strapi v4.1.12 allows attackers to execute arbitrary code via a crafted file.