Halo Security Launches Slack Integration for Real-Time Alerts on New Assets and Vulnerabilities

MIAMI, Florida, 21st November 2024, CyberNewsWire...

CVE-2022-32114: Unrestricted Upload of File with Dangerous Type

An unrestricted file upload vulnerability in the Add New Assets function of Strapi 4.1.12 allows attackers to conduct XSS attacks via a crafted PDF file. NOTE: the project documentation suggests that a user with the Media Library "Create upload" permission is supposed to be able to upload PDF fil...