Description

The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin components of the Admin panel, because it does not sanitize the plugin name, and attackers can inject arbitrary shell commands to be executed by the execa function.

Remediation

References

https://bittherapy.net/post/strapi-framework-remote-code-execution/

https://github.com/strapi/strapi/pull/4636

http://packetstormsecurity.com/files/163950/Strapi-CMS-3.0.0-beta.17.4-Remote-Code-Execution.html

http://packetstormsecurity.com/files/163940/Strapi-3.0.0-beta.17.7-Remote-Code-Execution.html

Related Vulnerabilities

CVE-2022-2900 Vulnerability in maven package org.webjars.npm:parse-url

CVE-2020-28445 Vulnerability in npm package npm-help

CVE-2021-41109 Vulnerability in npm package parse-server

CVE-2023-43256 Vulnerability in npm package gladys

CVE-2021-32860 Vulnerability in npm package izimodal

Severity

High

Classification

CWE-78 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Third Party Advisory Patch VDB Entry