Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 15/09/2023 Updated: 21/09/2023

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 0

Strapi is the an open-source headless content management system. Prior to version 4.12.1, there is a rate limit on the login function of Strapi's admin screen, but it is possible to circumvent it. Therefore, the possibility of unauthorized login by login brute force attack increases. Version 4.12.1 has a fix for this issue.

Vulnerable Product	Search on Vulmon	Subscribe to Product
strapi strapi

CWE-770 https://github.com/strapi/strapi/blob/32d68f1f5677ed9a9a505b718c182c0a3f885426/packages/core/admin/server/middlewares/rateLimit.js#L31 https://github.com/strapi/strapi/security/advisories/GHSA-24q2-59hm-rh9r https://github.com/strapi/strapi/releases/tag/v4.12.1 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-38507

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect