CVE-2023-34093

Strapi (open-source CMS) prior to version 4.10.8 is vulnerable to information disclosure due to improper handling of Content-Type attributes. The issue arises from the removal of the privateAttributes getter when users extend or modify content-types, which can cause any attribute to become public...

CVE-2023-34093

creationtimestamp| type| source ---|---|--- 2023-07-25 13:10:08+00:00| published-proof-of-concept| https://github.com/strapi/strapi/security/advisories/GHSA-chmr-rg2f-9jmf 2023-07-25 18:26:56+00:00| seen| https://t.me/cibsecurity/67241...