CVE-2022-27263

2022-04-1217:15:10

Google

osv.dev

7.7 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.4%

JSON

An arbitrary file upload vulnerability in the file upload module of Strapi v4.1.5 allows attackers to execute arbitrary code via a crafted file.

CPENameOperatorVersion
strapieq4.0.2
strapieq3.5.1
strapieq3.4.2
strapieq3.0.0-alpha.8
strapieq3.0.0-alpha.23
strapieq3.0.0-beta.18.4
strapieq3.0.0-beta.16.6
strapieq3.0.0-beta.18.7
strapieq3.2.3
strapieq1.0.0

Name	Operator	Version
strapi	eq	4.0.2
strapi	eq	3.5.1
strapi	eq	3.4.2
strapi	eq	3.0.0-alpha.8
strapi	eq	3.0.0-alpha.23
strapi	eq	3.0.0-beta.18.4
strapi	eq	3.0.0-beta.16.6
strapi	eq	3.0.0-beta.18.7
strapi	eq	3.2.3
strapi	eq	1.0.0