CVE-2022-0764

Description

Command injection in strapi

Predictions

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No vendor mitigations ingested yet for this CVE. The mitigation-content worker queues fetches as references arrive — check back in a few minutes, or see the references list below.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-0764
• https://github.com/strapi/strapi/issues/12879
• https://github.com/strapi/strapi/commit/2a3f5e988be6a2c7dae5ac22b9e86d579b462f4c
• https://github.com/strapi/strapi
• https://github.com/strapi/strapi/blob/master/packages/generators/app/lib/utils/fetch-npm-template.js#L13
• https://huntr.dev/bounties/001d1c29-805a-4035-93bb-71a0e81da3e5
• https://www.github.com/strapi/strapi/commit/2a3f5e988be6a2c7dae5ac22b9e86d579b462f4c

💬 Discuss CVE-2022-0764 on VIR Community →

Community-verified mitigations for this CVE will appear above when contributors publish them.