Skip to content
Looking for vulnerabilities in Strapi (CVE-2024-34065)
blog.quarkslab.com | vulnerability | CVE-2024-34065 | #authentication-bypass | #pentest | #javascript | #open-redirect | #strapi | #cve-2024-34065
Summary
Quarkslab discloses CVE-2024-34065 in Strapi: chaining an open redirect in the users-permissions auth flow with tokens leaked via URLs lets attackers bypass authentication via a crafted link.
- Published
- Collected