CVE-2023-36472

Strapi is an open-source headless content management system. Prior to version 4.11.7, an unauthorized actor can get access to user reset password tokens if they have the configure view permissions. The `/content-manager/relations` route does not remove private fields or ensure that they can't be selected. This issue is fixed in version 4.11.7.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.8 MEDIUM
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N
GitHub_MCNA
5.8 MEDIUM
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:N/A:N
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 34%
VendorProductVersion
strapistrapi
𝑥
< 4.11.7
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/strapi/strapi/releases/tag/v4.11.7
https://github.com/strapi/strapi/security/advisories/GHSA-v8gg-4mq2-88q4
https://github.com/strapi/strapi/releases/tag/v4.11.7
https://github.com/strapi/strapi/security/advisories/GHSA-v8gg-4mq2-88q4