Description
An arbitrary file upload vulnerability in the file upload module of Strapi v4.1.5 allows attackers to execute arbitrary code via a crafted file.
Remediation
References
https://github.com/strapi/strapi
https://www.youtube.com/watch?v=LEeabouqRrg
Related Vulnerabilities
CVE-2019-10305 Vulnerability in maven package com.xebialabs.xl-deploy:jenkins-dependendencies
CVE-2022-26183 Vulnerability in npm package pnpm
CVE-2021-33813 Vulnerability in maven package org.jdom:jdom
CVE-2021-30638 Vulnerability in maven package org.apache.tapestry:tapestry-core
CVE-2019-10447 Vulnerability in maven package io.jenkins.plugins:sofy-ai