Description
A denial of service exists in strapi v3.0.0-beta.18.3 and earlier that can be abused in the admin console using admin rights can lead to arbitrary restart of the application.
Remediation
References
https://hackerone.com/reports/768574
Related Vulnerabilities
CVE-2021-21351 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2021-27568 Vulnerability in maven package net.minidev:json-smart
CVE-2022-45396 Vulnerability in maven package com.thalesgroup.hudson.plugins:sourcemonitor
CVE-2022-22965 Vulnerability in maven package org.springframework:spring-webflux
CVE-2023-34615 Vulnerability in maven package net.pwall.json:jsonutil