GHSA-6xc2-mj39-q599

Strapi allows unauthenticated attacker to reset admin password without valid reset token

Source: GitHub Advisory Database (reviewed) Critical CVE-2019-18818

Packages

Ecosystem	Package	Affected	Fixed in
npm	strapi	< 3.0.0-beta.17.5	3.0.0-beta.17.5

Details

As written in the advisory (Markdown source, shown as plain text).

Versions of `strapi` prior to 3.0.0-beta.17.5 are vulnerable to Privilege Escalation. The password reset routes allows an unauthenticated attacker to reset an admin's password without providing a valid password reset token. ## Recommendation Upgrade to version 3.0.0-beta.17.5 or later.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2019-18818 advisory
https://github.com/strapi/strapi/pull/4443 web
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18818 web
https://github.com/strapi/strapi package
https://github.com/strapi/strapi/releases/tag/v3.0.0-beta.17.5 web
https://www.npmjs.com/advisories/1311 web
http://packetstormsecurity.com/files/163939/Strapi-3.0.0-beta-Authentication-Bypass.html web
http://packetstormsecurity.com/files/163950/Strapi-CMS-3.0.0-beta.17.4-Remote-Code-Execution.html web
http://packetstormsecurity.com/files/165896/Strapi-CMS-3.0.0-beta.17.4-Privilege-Escalation.html web