https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 21:29:58 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-33933 EUVD-2026-33933 https://cve.radiocsirt.org/vuln/euvd-2026-33933 https://cve.radiocsirt.org/vuln/fkie_cve-2021-46440 <p>Storing passwords in a recoverable format in the DOCUMENTATION plugin component of Strapi before 3.6.9 and 4.x before 4.1.5 allows an attacker to access a victim&#39;s HTTP request, get the victim&#39;s cookie, perform a base64 decode on the victim&#39;s cookie, and obtain a cleartext password, leading to getting API documentation for further API attacks.</p> <p>Storing passwords in a recoverable format in the DOCUMENTATION plugin component of Strapi before 3.6.9 and 4.x before 4.1.5 allows an attacker to access a victim&#39;s HTTP request, get the victim&#39;s cookie, perform a base64 decode on the victim&#39;s cookie, and obtain a cleartext password, leading to getting API documentation for further API attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-46440 https://cve.radiocsirt.org/vuln/ghsa-85vg-grr5-pw42 <p><strong>Affected:</strong> npm: strapi, npm: @strapi/strapi</p> <p>Storing passwords in a recoverable format in the DOCUMENTATION plugin component of Strapi before 3.6.9 and 4.x before 4.1.5 allows an attacker to access a victim&#39;s HTTP request. From this, the attacker can get the victim&#39;s cookie, base64 decode it, and obtain a cleartext password, leading to getting API documentation for further API attacks.</p> <p><strong>Affected:</strong> npm: strapi, npm: @strapi/strapi</p> <p>Storing passwords in a recoverable format in the DOCUMENTATION plugin component of Strapi before 3.6.9 and 4.x before 4.1.5 allows an attacker to access a victim&#39;s HTTP request. From this, the attacker can get the victim&#39;s cookie, base64 decode it, and obtain a cleartext password, leading to getting API documentation for further API attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-85vg-grr5-pw42 https://cve.radiocsirt.org/vuln/gsd-2021-46440 gsd-2021-46440 https://cve.radiocsirt.org/vuln/gsd-2021-46440