Description
An arbitrary file upload vulnerability in the file upload module of Strapi v4.1.5 allows attackers to execute arbitrary code via a crafted file.
Remediation
References
https://github.com/strapi/strapi
https://www.youtube.com/watch?v=LEeabouqRrg
Related Vulnerabilities
CVE-2020-28487 Vulnerability in maven package org.webjars.npm:vis-timeline
CVE-2022-2048 Vulnerability in maven package org.eclipse.jetty.http2:http2-server
CVE-2014-3623 Vulnerability in maven package org.apache.cxf:cxf
CVE-2020-2268 Vulnerability in maven package org.jenkins-ci.plugins:mongodb
CVE-2019-1003036 Vulnerability in maven package org.jenkins-ci.plugins:azure-vm-agents