Moole Vulnerability Database

Find real vulnerabilities before they ship

Medium

CVE-2020-8123

A denial of service exists in strapi v3.0.0-beta.18.3 and earlier that can be abused in the admin console using admin rights can lead to arbitrary restart of the application.

VectorNETWORK

PublishedFeb 04, 2020, 20:15

Published Bysupport@hackerone.com

Base Score

Score4.9

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

strapi-admin(npm)03.0.0-beta.18.4N/A

References

https://hackerone.com/reports/768574

Weakness Type

CWE-400

CVSS Metrics

Base Score

4.9

Vector String

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Base SeverityMedium

Version

3.1

Attack Vector (AV)

NETWORK