9 matches found
Incorrect Authorization
Overview @strapi/admin is a Strapi Admin Affected versions of this package are vulnerable to Incorrect Authorization via reconcileTokenPermissionsToUserCeiling, which ignores token permissions with omitted or null fields. When an administrator restricts a role's field-level access in the Content...
5.3CVSS5.7AI score0.00199EPSS
SaveExploits0References2
20