The Synopsys Cybersecurity Research Center has uncovered two critical vulnerabilities in JSON that can expose data in the open-source Node.js headless content management system Strapi. The two vulnerabilities, named CVE-2022-30617 and CVE-2022-30618, are described as sensitive data exposure vulnerabilities that may lead to account compromise in the admin panel of Strapi.

Read full article on SiliconANGLE