tocsin

CVE-2023-36472

3 advisories.

npm/@strapi/plugin-content-manager CVE-2023-36472: medium 5.8

Strapi may leak sensitive user information, user reset password, tokens via content-manager views

Action: Upgrade @strapi/plugin-content-manager to 4.11.7 or later.

npm i @strapi/plugin-content-manager@4.11.7

Affected

introducedfixedlast affected
04.11.7-

Fixed versions

4.11.7

Sources

CVE-2023-36472 · published · modified · JSON

npm/@strapi/admin CVE-2023-36472: medium 5.8

Strapi may leak sensitive user information, user reset password, tokens via content-manager views

Action: Upgrade @strapi/admin to 4.11.7 or later.

npm i @strapi/admin@4.11.7

Affected

introducedfixedlast affected
04.11.7-

Fixed versions

4.11.7

Sources

CVE-2023-36472 · published · modified · JSON

npm/@strapi/utils CVE-2023-36472: medium 5.8

Strapi may leak sensitive user information, user reset password, tokens via content-manager views

Action: Upgrade @strapi/utils to 4.11.7 or later.

npm i @strapi/utils@4.11.7

Affected

introducedfixedlast affected
04.11.7-

Fixed versions

4.11.7

Sources

CVE-2023-36472 · published · modified · JSON