Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2023/09/13 4:31 p.m.34 views

Strapi's field level permissions not being respected in relationship title

Summary Field level permissions not being respected in relationship title. If I have a relationship title and the relationship shows a field I don't have permission to see I will still be visible. Details No RBAC checks on on the relationship the relation endpoint returns PoC Setup Create a fresh...

6.8CVSS6.1AI score0.00534EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder