Description
Storing passwords in a recoverable format in the DOCUMENTATION plugin component of Strapi before 3.6.9 and 4.x before 4.1.5 allows an attacker to access a victim’s HTTP request. From this, the attacker can get the victim’s cookie, base64 decode it, and obtain a cleartext password, leading to getting API documentation for further API attacks.
Recommendation
Update the @strapi/strapi package to the latest compatible version. Followings are version details:
- Affected version(s): >= 4.0.0, < 4.1.5
- Patched version(s): 4.1.5
References
Could your website be exposed too?
SmartScanner can check your website for Insecure password handling vulnerability in Strapi and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Insecure template handling in Squirrelly - CVE-2021-32819
- Insecure template handling in haml-coffee - CVE-2021-32818
- textAngular Cross-site Scripting vulnerability - CVE-2021-32854
- string-kit Inefficient Regular Expression Complexity vulnerability - CVE-2021-4299
You might also like:
See something that needs correcting? Let us knowUpdated February 01, 2023