medium4.9
CVE-2020-8123
Uncontrolled Resource Consumption in strapi
Impact
A denial of service exists in strapi v3.0.0-beta.18.3 and earlier that can be abused in the admin console using admin rights can lead to arbitrary restart of the application.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | strapi-admin | <= 3.0.0-beta.18.3 | 3.0.0-beta.18.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Strapi | Strapi | before 3.0.0 Version 3.0.0 |