CVE-2024-37818

Strapi v4.24.4 was discovered to contain a Server-Side Request Forgery SSRF via the component /strapi.io/next/image. This vulnerability allows attackers to scan for open ports or access sensitive information via a crafted GET request. NOTE: The Strapi Development Community argues that this issue ...

@strapi/data-transfer (4.24.4), strapi-test-plugin (0.1.0) potentially affected by CVE-2024-37818 via @strapi/strapi (4.24.4)

@strapi/strapi NPM version 4.24.4 is affected by a known vulnerability. The following packages have a transitive dependency on @strapi/strapi and may be impacted: - @strapi/data-transfer 4.24.4 - strapi-test-plugin 0.1.0 Source cves: CVE-2024-37818 Source advisory: OSV:GHSA-P9FF-J98V-P435...