CVE-2023-34235
2 advisories.
npm/@strapi/database CVE-2023-34235: high 8.6, EPSS 1.09%
Leaking sensitive user information still possible by filtering on private with prefix fields
Action: Upgrade @strapi/database to 4.10.8 or later.
npm i @strapi/database@4.10.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.10.8 | - |
Fixed versions
| 4.10.8 |
Sources
- osv: GHSA-9xg4-3qfm-9w8f
- https://github.com/strapi/strapi/security/advisories/GHSA-9xg4-3qfm-9w8f
- https://nvd.nist.gov/vuln/detail/CVE-2023-34235
- https://github.com/strapi/strapi
- https://github.com/strapi/strapi/releases/tag/v4.10.8
CVE-2023-34235 · published · modified · JSON
npm/@strapi/utils CVE-2023-34235: high 8.6, EPSS 1.09%
Leaking sensitive user information still possible by filtering on private with prefix fields
Action: Upgrade @strapi/utils to 4.10.8 or later.
npm i @strapi/utils@4.10.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.10.8 | - |
Fixed versions
| 4.10.8 |
Sources
- osv: GHSA-9xg4-3qfm-9w8f#npm/@strapi/utils
- https://github.com/strapi/strapi/security/advisories/GHSA-9xg4-3qfm-9w8f
- https://nvd.nist.gov/vuln/detail/CVE-2023-34235
- https://github.com/strapi/strapi
- https://github.com/strapi/strapi/releases/tag/v4.10.8
CVE-2023-34235 · published · modified · JSON