GHSA-23fp-fmrv-f5px

Uncontrolled Resource Consumption in strapi

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-8123

Packages

Ecosystem	Package	Affected	Fixed in
npm	strapi-admin	< 3.0.0-beta.18.4	3.0.0-beta.18.4

Details

As written in the advisory (Markdown source, shown as plain text).

A denial of service exists in strapi v3.0.0-beta.18.3 and earlier that can be abused in the admin console using admin rights can lead to arbitrary restart of the application.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2020-8123 advisory
https://github.com/strapi/strapi/commit/c0c191c08f05fe10d7a6b1bf9475c1a651a89362 web
https://hackerone.com/reports/768574 web
https://github.com/strapi/strapi package