writeups.xyz / Multiple Critical Vulnerabilities In Strapi Versions <=4.7.1

Submitter : c2a

Date: 17 April 2023

Bounty : undisclosed

Vulnerabilities :

• Authentication Bypass
• SSTI
• RCE
• Amazon Cognito Misconfiguration
• Information Disclosure

Programs :

• Strapi

Authors :

• GhostCcamm (@GhostCcamm)

Link :
https://www.ghostccamm.com/blog/multi_strapi_vulns/