npm/@strapi/core CVE-2024-56143: high 8.2, EPSS 0.40%
Strapi Allows Unauthorized Access to Private Fields via parms.lookup
Action: Upgrade @strapi/core to 5.5.2 or later.
npm i @strapi/core@5.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.5.2 | - |
Fixed versions
| 5.5.2 |
Sources
- osv: GHSA-495j-h493-42q2
- https://github.com/strapi/strapi/security/advisories/GHSA-495j-h493-42q2
- https://nvd.nist.gov/vuln/detail/CVE-2024-56143
- https://github.com/strapi/strapi/commit/0c6e0953ae1e62afae9329de7ae6d6a5e21b95b8
- https://github.com/strapi/strapi
CVE-2024-56143 · published · modified · JSON