CVE-2024-34065
1 advisory.
npm/@strapi/plugin-users-permissions CVE-2024-34065: high 7.1, EPSS 0.70%
@strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass
Action: Upgrade @strapi/plugin-users-permissions to 4.24.2 or later.
npm i @strapi/plugin-users-permissions@4.24.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.24.2 | - |
Fixed versions
| 4.24.2 |
Sources
- osv: GHSA-wrvh-rcmr-9qfc
- https://github.com/strapi/strapi/security/advisories/GHSA-wrvh-rcmr-9qfc
- https://nvd.nist.gov/vuln/detail/CVE-2024-34065
- https://github.com/strapi/strapi/commit/9c79921d22142a5de77ea26151550a14e4b12669
- https://github.com/strapi/strapi
CVE-2024-34065 · published · modified · JSON