CVE-2023-38507

Summary

CVE-2023-38507 is a vulnerability affecting Strapi, an open-source headless content management system. Before version 4.12.1, Strapi's admin login function included a rate limit to prevent brute force attacks. However, this limit could be bypassed, increasing the risk of unauthorized login through brute force attacks. The latest version, 4.12.1, includes a fix for this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.