Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 43
Reset filtersAuthentication Bypass in @strapi/plugin-users-permissions
Strapi mishandles hidden attributes within admin API responses
Captcha Bypass in strapi-plugin-ezforms
Strapi 4.1.12 Cross-site Scripting via crafted file
Cross-site Scripting in Strapi
Improper Input Validation in strapi
Improper Removal of Sensitive Information Before Storage or Transfer in Strapi
Improper Removal of Sensitive Information Before Storage or Transfer in Strapi
Insecure password handling vulnerability in Strapi
Unrestricted Upload of File with Dangerous Type in Strapi
Command injection in strapi
Uncontrolled Resource Consumption in strapi
Weak Password Recovery Mechanism for Forgotten Password in Strapi
Authorization bypass in Strapi
Cross-site Scripting in Strapi
Improper Authorization in Strapi
Command Injection in strapi
Strapi allows unauthenticated attacker to reset admin password without valid reset token
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.