1 matches found
Arbitrary File Upload
strapi is vulnerable to arbitrary file upload. The vulnerability exists in the module.exports function in content-api.js due to improper validation of the upload files, allowing an attacker to upload a maliciously crafted file and remotely execute arbitrary code on the system...