VDB
Sign up
CRITICAL9.8

GHSA-7frv-9phw-vrvr

Authorization bypass in Strapi

Quick fix

GHSA-7frv-9phw-vrvr — strapi: upgrade to the fixed version with the command below.

npm install strapi@3.2.5

Details

`admin/src/containers/InputModalStepperProvider/index.js` in Strapi before 3.2.5 has unwanted `/proxy?url=` functionality.

Are you affected?

Enter the version of the package you're using.

Affected packages

npm/strapi
Introduced in: 0Fixed in: 3.2.5
Fixnpm install strapi@3.2.5

References