Insecure Authorization

2020-11-0206:07:44

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

30.9%

JSON

strapi-plugin-content-type-builder suffers from insecure authorization. The admin::hasPermissions restriction for the content-type-builder (CTB) routes are not configured, allowing unauthorized access to the affected resources.

CPENameOperatorVersion
strapi-plugin-content-type-builderle3.2.4
strapi-plugin-content-type-builderle3.2.4

CPE	Name	Operator	Version
	strapi-plugin-content-type-builder	le	3.2.4
	strapi-plugin-content-type-builder	le	3.2.4

References

github.com/advisories/GHSA-4p55-xj37-fx7g

github.com/strapi/strapi/pull/8439

github.com/strapi/strapi/releases/tag/v3.2.5

0.001 Low

EPSS

Percentile

30.9%

JSON

Related for VERACODE:27729