1.
blog.quarkslab.com | vulnerability | | original ↗ | #authentication-bypass | #pentest | #javascript | #open-redirect
Quarkslab discloses CVE-2024-34065 in Strapi: chaining an open redirect in the users-permissions auth flow with tokens leaked via URLs lets attackers bypass authentication via a crafted link.
Skip to content