CVE-2021-28128
1 advisory.
npm/strapi CVE-2021-28128: high 8.1
Weak Password Recovery Mechanism for Forgotten Password in Strapi
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.6.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-37hx-4mcq-wc3h
- https://nvd.nist.gov/vuln/detail/CVE-2021-28128
- https://github.com/strapi/strapi/issues/9657
- https://github.com/strapi/strapi
- https://github.com/strapi/strapi/releases/tag/v3.6.0
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2021-008.txt
CVE-2021-28128 · published · modified · JSON