PT-2020-19960 · Strapi · Strapi

Princechaddha · Published 2020-02-04 · Updated 2021-12-10 · CVE-2020-8123

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions strapi versions 3.0.0-beta.18.3 and earlier

Description A denial of service issue exists that can be exploited in the admin console with admin rights, potentially leading to the arbitrary restart of the application.

Recommendations For versions 3.0.0-beta.18.3 and earlier, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2020-8123

GHSA-23FP-FMRV-F5PX

Affected Products

Strapi

References · 6

• 🔥 https://hackerone.com/reports/768574 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-8123 · Security Note
• https://osv.dev/vulnerability/GHSA-23fp-fmrv-f5px · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-8123 · Vendor Advisory
• https://github.com/strapi/strapi · Note
• https://github.com/strapi/strapi/commit/c0c191c08f05fe10d7a6b1bf9475c1a651a89362 · Note