CVE-2022-31367
CVE-2022-31367
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Strapi before 3.6.10 and 4.x before 4.1.10 mishandles hidden attributes within admin API responses.
CVSS 8.8 · High · EPSS 1.7% · Fix available
- Published
- Updated
Stack: node
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
strapi npm
- Affected ranges
- SEMVER: < 3.6.10
Update to 3.6.10
@strapi/strapi npm
- Affected ranges
- SEMVER: ≥ 4.0.0-next.0, < 4.1.10
Update to 4.1.10