GitHub Advisoryadvisory · npm
GHSA-85vg-grr5-pw42 Insecure password handling vulnerability in Strapi
HIGH
Official page ↗
- Aliases
- CVE-2021-46440
- Ecosystem
- npm
- Packages
- strapi, @strapi/strapi
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-922
- Reviewed
- 2022-05-18
Affected packages
• npm strapi: < 3.6.9 → fixed in 3.6.9
• npm @strapi/strapi: >= 4.0.0, < 4.1.5 → fixed in 4.1.5
Description
Storing passwords in a recoverable format in the DOCUMENTATION plugin component of Strapi before 3.6.9 and 4.x before 4.1.5 allows an attacker to access a victim's HTTP request. From this, the attacker can get the victim's cookie, base64 decode it, and obtain a cleartext password, leading to getting API documentation for further API attacks.
Related
Alias · CVE (1)
- CVE-2021-46440 Storing passwords in a recoverable format in the DOCUMENTATION plugin component of Strapi before 3.6.9 and 4.x before 4.1.5 allows an… vulnerability
Weakness · CWE (1)
- CWE-922 Insecure Storage of Sensitive Information weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2021-46440 advisory
- https://github.com/strapi/strapi/pull/12246 web
- https://github.com/strapi/strapi package
- https://hub.docker.com/r/strapi/strapi web
- https://strapi.io web
- http://packetstormsecurity.com/files/166915/Strapi-3.6.8-Password-Disclosure-Insecure-Handling.html web