Lucene search

K
prionPRIOn knowledge basePRION:CVE-2021-46440
HistoryMay 03, 2022 - 6:15 p.m.

Format string

2022-05-0318:15:00
PRIOn knowledge base
www.prio-n.com
5

0.008 Low

EPSS

Percentile

81.4%

Storing passwords in a recoverable format in the DOCUMENTATION plugin component of Strapi before 3.6.9 and 4.x before 4.1.5 allows an attacker to access a victim’s HTTP request, get the victim’s cookie, perform a base64 decode on the victim’s cookie, and obtain a cleartext password, leading to getting API documentation for further API attacks.

CPENameOperatorVersion
strapige4.0.0
strapilt4.1.5
strapilt3.6.9

0.008 Low

EPSS

Percentile

81.4%

Related for PRION:CVE-2021-46440