https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 22:26:11 +0000 https://cve.radiocsirt.org/vuln/cve-2021-46440 <p>Storing passwords in a recoverable format in the DOCUMENTATION plugin component of Strapi before 3.6.9 and 4.x before 4.1.5 allows an attacker to access a victim&#39;s HTTP request, get the victim&#39;s cookie, perform a base64 decode on the victim&#39;s cookie, and obtain a cleartext password, leading to getting API documentation for further API attacks.</p> <p>Storing passwords in a recoverable format in the DOCUMENTATION plugin component of Strapi before 3.6.9 and 4.x before 4.1.5 allows an attacker to access a victim&#39;s HTTP request, get the victim&#39;s cookie, perform a base64 decode on the victim&#39;s cookie, and obtain a cleartext password, leading to getting API documentation for further API attacks.</p> https://cve.radiocsirt.org/vuln/cve-2021-46440