TI-2023-26082 CVE-2023-48218 · GHSA-6h67-934r-82g7
Incorrect authorization in strapi-community strapi-plugin-protected-populate
Priority LOW 25
The Strapi Protected Populate Plugin protects `get` endpoints from revealing too much information.
Strapi
Records46All Threatist records
Exploited (KEV)1In CISA KEV
CVSS critical9CVSS 9.0–10.0
CVSS high17CVSS 7.0–8.9
Exploited now
Strapi records in CISA KEVComponents
Products in the NVD configurations · select one to filter the recordsRecords
1 record in Protected Populate · all components