CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

RedhatCVE•added 2025/05/22 3:25 p.m.•6 views

CVE-2020-27664

admin/src/containers/InputModalStepperProvider/index.js in Strapi before 3.2.5 has unwanted /proxy?url= functionality...

9.8CVSS6.8AI score0.02292EPSS

Exploits0

Node.js•added 2021/05/10 6:48 p.m.•56 views

Authorization Bypass

Overview admin/src/containers/InputModalStepperProvider/index.js in strapi before 3.2.5 has unwanted /proxy?url= functionality. Recommendation Upgrade to version 3.2.5 or later References - CVE - GitHub Advisory...

7.5CVSS4.6AI score0.02292EPSS

Exploits0Affected Software1

NVD•added 2020/10/22 7:15 p.m.•17 views

CVE-2020-27664

admin/src/containers/InputModalStepperProvider/index.js in Strapi before 3.2.5 has unwanted /proxy?url= functionality...

9.8CVSS0.02292EPSS

Exploits0References2

CVE•added 2020/10/22 6:19 p.m.•62 views

CVE-2020-27664

Strapi prior to 3.2.5 contains a vulnerability in admin/src/containers/InputModalStepperProvider/index.js enabling an unwanted proxy/ URL parameter handling ("/proxy?url=") that could be abused. Public sources (NVD entry CVE-2020-27664, Red Hat advisory, GitHub/OSSV and GHSA) document this as an ...

9.8CVSS9.3AI score0.02292EPSS

Exploits0References2Affected Software1