CVE-2024-29181

CVSS 3.1 Score 2.3 of 10 (low)

Details

Published Jun 12, 2024
Updated: Jun 13, 2024
CWE ID 639

Summary

CVE-2024-29181 is a vulnerability affecting Strapi, an open-source content management system. In versions prior to 4.19.1, a super admin can create a collection with an association to another collection. When this occurs, a user with an Author Role can inadvertently access a list of associated items that they did not create. This issue grants unintended access to data, potentially compromising the security of the content management system. To mitigate this risk, it is recommended that users upgrade the @strapi/plugin-content-manager to version 4.19.1, which includes a patch for this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share