Looking for vulnerabilities in Strapi (CVE-2024-34065)

CVE

CVE-2024-34065

Published

2024-06-24 22:00

Collected

2026-07-08 12:20

---
id: 4370
title: "Looking for vulnerabilities in Strapi (CVE-2024-34065)"
cve: CVE-2024-34065
source_domain: blog.quarkslab.com
source_url: "https://blog.quarkslab.com/looking-for-vulnerabilities-in-strapi-cve-2024-34065.html"
published_at: "2024-06-24T22:00:00Z"
tags: ["authentication-bypass", "pentest", "javascript", "open-redirect", "strapi", "cve-2024-34065"]
phying_url: "https://phying.com/item/4370"
lang: en
---

# Looking for vulnerabilities in Strapi (CVE-2024-34065)

## Summary

Quarkslab discloses CVE-2024-34065 in Strapi: chaining an open redirect in the users-permissions auth flow with tokens leaked via URLs lets attackers bypass authentication via a crafted link.

## Intelligence Metadata

- **Sources:** blog.quarkslab.com
- **CVE:** CVE-2024-34065
- **Published:** 2024-06-24T22:00:00Z
- **Original:** https://blog.quarkslab.com/looking-for-vulnerabilities-in-strapi-cve-2024-34065.html
- **Phying News:** https://phying.com/item/4370