@strapi/plugin-users-permissions vulnerabilities (npm)
8 vulnerabilities.
-
@strapi/plugin-users-permissionsnpm Strapi: Password Reset Does Not Revoke Existing Refresh Sessions 2.1 Low -
@strapi/plugin-users-permissionsnpm Strapi has a rate limit bypass on users-permissions plugin via attacker-controlled email keying 6.9 Medium -
@strapi/plugin-users-permissionsnpm @strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass 7.1 High -
@strapi/plugin-users-permissionsnpm Unauthorized Access to Private Fields in User Registration API in strapi 7.6 High -
@strapi/plugin-users-permissionsnpm Strapi Improper Rate Limiting vulnerability 7.3 High -
@strapi/plugin-users-permissionsnpm Strapi does not verify the access or ID tokens issued during the OAuth flow 7.5 High -
@strapi/plugin-users-permissionsnpm Strapi plugins vulnerable to Server-Side Template Injection and Remote Code Execution in the Users-Permissions Plugin 7.2 High -
@strapi/plugin-users-permissionsnpm Authentication Bypass in @strapi/plugin-users-permissions 8.2 High