Lucene search
GoogleOSV:GHSA-4P55-XJ37-FX7GHistoryOct 29, 2020 - 6:29 p.m.
Improper Authorization in Strapi
2020-10-2918:29:31
Google
osv.dev
7
0.001 Low
EPSS
Percentile
30.9%
In Strapi before 3.2.5, there is no admin::hasPermissions restriction for CTB (aka content-type-builder) routes.
| CPE | Name | Operator | Version |
|---|---|---|---|
| strapi-plugin-content-type-builder | lt | 3.2.5 |
Related
prion
prion
Design/Logic Flaw
2020-10-22 19:15:00
veracode
veracode
Insecure Authorization
2020-11-02 06:07:44
cvelist
cvelist
CVE-2020-27665
2020-10-22 18:19:31
cve
cve
CVE-2020-27665
2020-10-22 19:15:13
osv
osv
CVE-2020-27665
2020-10-22 19:15:13
nvd
nvd
CVE-2020-27665
2020-10-22 19:15:13
github
github
Improper Authorization in Strapi
2020-10-29 18:29:31