More information about this CVE will likely be available in a few days

Description


The strapi/review-workflows package is vulnerable to a broken access control vulnerability allowing updates to be made without verifying whether the caller possesses update rights for the underlying document.

Related CPE's


Could not find any relations

Weaknesses


Could not find any weaknesses

CVSS impact metrics


Could not find any metrics

Information


Source identifier

[email protected]

Vulnerability status

Deferred

Published

2026-10-27T19:17:28.450Z

21 hours ago

Last modified

2026-10-28T15:24:56.033Z

54 minutes ago