GoogleOSV:CVE-2022-31367

HistorySep 27, 2022 - 11:15 p.m.

CVE-2022-31367

2022-09-2723:15:13

Google

osv.dev

strapi

cve-2022-31367

admin api

8.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.3%

JSON

Strapi before 3.6.10 and 4.x before 4.1.10 mishandles hidden attributes within admin API responses.

CPENameOperatorVersion
strapieq4.1.1
strapieq4.0.2
strapieq4.0.8
strapieq4.0.0
strapieq4.0.1
strapieq4.1.5
strapieq4.1.7
strapieq4.0.4
strapieq4.1.6
strapieq4.0.3

Name	Operator	Version
strapi	eq	4.1.1
strapi	eq	4.0.2
strapi	eq	4.0.8
strapi	eq	4.0.0
strapi	eq	4.0.1
strapi	eq	4.1.5
strapi	eq	4.1.7
strapi	eq	4.0.4
strapi	eq	4.1.6
strapi	eq	4.0.3

Rows per page:

1-10 of 201

References

github.com/kos0ng/CVEs/tree/main/CVE-2022-31367

github.com/strapi/strapi/releases/tag/v3.6.10

github.com/strapi/strapi/releases/tag/v4.1.10