← All advisories

Critical severity9.8NVD Advisory· Published Oct 22, 2020· Updated Jun 17, 2026

CVE-2020-27664

CVE-2020-27664

Description

admin/src/containers/InputModalStepperProvider/index.js in Strapi before 3.2.5 has unwanted /proxy?url= functionality.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
strapinpm	< 3.2.5	3.2.5

Affected products

3

Strapi/Strapidescription
ghsa-coords
pkg:npm/strapi
Range: < 3.2.5
Strapi/Strapi
cpe:2.3:a:strapi:strapi:*:*:*:*:*:*:*:*
Range: <3.2.5

Patches

Vulnerability mechanics

References

4

github.com/strapi/strapi/pull/8442nvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-7frv-9phw-vrvrghsaADVISORY
github.com/strapi/strapi/releases/tag/v3.2.5nvdRelease NotesThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2020-27664ghsaADVISORY

News mentions

0

No linked articles in our index yet.