CVE-2022-30618

🗓️ 19 May 2022 17:08:47Reported by SNPSType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 526 Views

An authenticated user with access to the Strapi admin panel can view private and sensitive data for API users, potentially leading to compromise of user accounts

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-30618	19 May 202218:15	–	attackerkb
Circl	CVE-2022-30618	19 May 202222:29	–	circl
CNNVD	Strapi 安全漏洞	19 May 202200:00	–	cnnvd
Cvelist	CVE-2022-30618	19 May 202217:08	–	cvelist
EUVD	EUVD-2022-5354	3 Oct 202520:07	–	euvd
Github Security Blog	Improper Removal of Sensitive Information Before Storage or Transfer in Strapi	20 May 202200:00	–	github
NVD	CVE-2022-30618	19 May 202218:15	–	nvd
OSV	GHSA-VGJ7-895J-GPR6 Improper Removal of Sensitive Information Before Storage or Transfer in Strapi	20 May 202200:00	–	osv
Prion	Design/Logic Flaw	19 May 202218:15	–	prion
RedhatCVE	CVE-2022-30618	22 May 202521:50	–	redhatcve

NVD

Node

strapi strapiRange3.0.0–3.6.10

strapi strapiRange4.0.0–4.1.10

[
  {
    "product": "Strapi",
    "vendor": "Strapi",
    "versions": [
      {
        "status": "affected",
        "version": "< 3.6.10"
      },
      {
        "status": "affected",
        "version": "< 4.1.10"
      }
    ]
  }
]