CNNVD-202510-2338 Information
Oct 16, 2025
cve
CNNVD ID
CNNVD-202510-2338
Related CVE
- CNNVD Published: 2025-10-16
Description (Chinese)
Strapi是法国strapi社区的一套开源的内容管理系统（CMS）。 Strapi 5.10.3之前版本存在安全漏洞，该漏洞源于未强制执行bcryptjs密码哈希的最大密码长度，可能导致密码被静默截断。
Description (English)
Strapi is an open-source content management system (CMS) for the French community of Strapi. There was a security loophole in the pre-Strapi 5.10.3 version, which stemmed from the failure to enforce the maximum password length of the bcryptjs password Hashi, which could lead to a silent break.
Hazard Level
High
Vulnerability Type
其他
Published
2025-10-16
Last Modified
2026-02-24
References
https://github.com/strapi/strapi/commit/41f8cdf116f7f464dae7d591e52d88f7bfa4b7cb https://github.com/strapi/strapi/security/advisories/GHSA-2cjv-6wg9-f4f3
Patch
https://github.com/strapi/strapi/releases
Share on: