CVE-2022-27263

CVE-2022-27263

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An arbitrary file upload vulnerability in the file upload module of Strapi v4.1.5 allows attackers to execute arbitrary code via a crafted file.

CVSS 9.8 · Critical · EPSS 3.2%

Published

2022-04-12T16:29:02.000Z

Updated

2024-08-03T05:25:32.326Z

Stack: node

Check your server →