CVE-2023-48218

npm/strapi-plugin-protected-populate CVE-2023-48218: medium 5.3, EPSS 0.60%

Bypass of field access control in strapi-plugin-protected-populate

Action: Upgrade strapi-plugin-protected-populate to 1.3.4 or later.

npm i strapi-plugin-protected-populate@1.3.4

Affected

Fixed versions

Sources

• osv: GHSA-6h67-934r-82g7
• https://github.com/strapi-community/strapi-plugin-protected-populate/security/advisories/GHSA-6h67-934r-82g7
• https://nvd.nist.gov/vuln/detail/CVE-2023-48218
• https://github.com/strapi-community/strapi-plugin-protected-populate/commit/05441066d64e09dd55937d9f089962e9ebe2fb39
• https://github.com/strapi-community/strapi-plugin-protected-populate
• https://github.com/strapi-community/strapi-plugin-protected-populate/releases/tag/v1.3.4

CVE-2023-48218 · published 2023-11-20T21:01:43Z · modified 2026-09-10T03:50:04.151489371Z · JSON