Strapi Open Source and Enterprise Headless CMS vulnerabilities
1 known vulnerability in Strapi Open Source and Enterprise Headless CMS from Strapi. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest first
- 9.1 Critical severity
Strapi Open Source and Enterprise Headless CMS: Missing Authorization
The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document.