CVE-2019-19609 – Strapi / Strapi – OS command injection
CVE-2019-19609 is an OS command injection vulnerability impacting multiple versions of Strapi. An exploit was observed in open source and a link to an exploit was shared in the underground.
Summary:
CVE-2019-19609 is an OS command injection vulnerability impacting multiple versions of Strapi. An exploit was observed in open source and a link to an exploit was shared in the underground.
PoC Links(if available):
Exploit DB link –
https://www.exploit-db.com/exploits/50239
Known Counter Measures:
The vendor addressed the vulnerability in Strapi version 3.0.0-beta.17.8.
Links to patches(if available)
https://github.com/strapi/strapi/pull/4636
