Description

Arbitrary Command Injection in GitHub repository strapi/strapi prior to 4.1.0.

Remediation

References

https://github.com/strapi/strapi/commit/2a3f5e988be6a2c7dae5ac22b9e86d579b462f4c

https://github.com/strapi/strapi/issues/12879

https://huntr.dev/bounties/001d1c29-805a-4035-93bb-71a0e81da3e5

Related Vulnerabilities

CVE-2022-37262 Vulnerability in npm package steal

CVE-2021-3461 Vulnerability in maven package org.keycloak:keycloak-services

CVE-2011-2092 Vulnerability in maven package com.adobe.blazeds:flex-messaging-common

CVE-2017-20162 Vulnerability in maven package org.webjars.npm:ms

CVE-2021-43803 Vulnerability in npm package next

Severity

High

Classification

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Tags

Patch Third Party Advisory Issue Tracking Exploit NVD-CWE-Other