Strapi 3.6.8 Password Disclosure / Insecure Handling

Discussion in 'News Aggregator' started by Packet Storm, 3 May 2022.

  1. Packet Storm

    Packet Storm Guest

    Strap versions prior to 3.6.9 and 4.1.5 disclose a user's password due to simply base64 encoding it and sticking it in a cookie.

    Continue reading...
     
    #1 Packet Storm, 3 May 2022
(You must log in or sign up to post here.)

Share This Page

Loading...