Description
An arbitrary file upload vulnerability in the file upload module of Strapi v4.1.5 allows attackers to execute arbitrary code via a crafted file.
Remediation
References
https://github.com/strapi/strapi
https://www.youtube.com/watch?v=LEeabouqRrg
Related Vulnerabilities
CVE-2017-1000486 Vulnerability in maven package org.primefaces:primefaces
CVE-2020-2214 Vulnerability in maven package org.jenkins-ci.plugins:zap-pipeline
CVE-2018-17197 Vulnerability in maven package org.apache.tika:tika-core
CVE-2017-16877 Vulnerability in npm package next
CVE-2023-4316 Vulnerability in maven package org.webjars.npm:zod