Skip to content

CVE-2020-27664

CVE-2020-27664

This page contains facts from public vulnerability sources. Check the original advisory before updating.

admin/src/containers/InputModalStepperProvider/index.js in Strapi before 3.2.5 has unwanted /proxy?url= functionality.

CVSS 9.8 · Critical · EPSS 2.3% · Fix available

Published: 2020-10-22T18:19:44.000Z
Updated: 2024-08-04T16:18:45.677Z

Stack: node

Affected products and versions

n/a
Versions
- n/a: Affected
No fix published
strapi npm
Affected ranges
- SEMVER: < 3.2.5
Update to 3.2.5

Original sources

Check your server →