CVE-2022-27263

An arbitrary file upload vulnerability in the file upload module of Strapi v4.1.5 allows attackers to execute arbitrary code via a crafted file.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-04-12

Last modified

2024-08-03

Weaknesses

CWE-434

Affected products

• Strapi (Strapi)

References

• https://github.com/strapi/strapi
• https://www.youtube.com/watch?v=LEeabouqRrg