Security Advisory

CVE-2020-27665

7.5
HIGH

Vulnerability Description

In Strapi before 3.2.5, there is no admin::hasPermissions restriction for CTB (aka content-type-builder) routes.
Published Date October 22, 2020
Official Source NIST NVD Advisory