CVE-2025-53092

{"id": "CVE-2025-53092", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-53092", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-16T18:03:56.017150Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "affected": [{"source": "security-advisories@github.com", "affectedData": [{"vendor": "strapi", "product": "strapi", "versions": [{"status": "affected", "version": "< 5.20.0"}]}]}], "published": "2025-10-16T17:15:33.727", "references": [{"url": "https://github.com/strapi/strapi/security/advisories/GHSA-9329-mxxw-qwf8", "tags": ["Vendor Advisory"], "source": "security-advisories@github.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-200"}, {"lang": "en", "value": "CWE-284"}, {"lang": "en", "value": "CWE-364"}, {"lang": "en", "value": "CWE-942"}]}], "descriptions": [{"lang": "en", "value": "Strapi is an open source headless content management system. Strapi versions prior to 5.20.0 contain a CORS misconfiguration vulnerability in default installations. By default, Strapi reflects the value of the Origin header back in the Access-Control-Allow-Origin response header without proper validation or whitelisting. This allows an attacker-controlled site to send credentialed requests to the Strapi backend. An attacker can exploit this by hosting a malicious site on a different origin (e.g., different port) and sending requests with credentials to the Strapi API. The vulnerability is fixed in version 5.20.0. No known workarounds exist."}, {"lang": "es", "value": "Strapi es un sistema de gesti\u00f3n de contenido headless de c\u00f3digo abierto. Las versiones de Strapi anteriores a la 5.20.0 contienen una vulnerabilidad de mala configuraci\u00f3n de CORS en instalaciones predeterminadas. Por defecto, Strapi refleja el valor del encabezado Origin en el encabezado de respuesta Access-Control-Allow-Origin sin una validaci\u00f3n o lista blanca adecuadas. Esto permite que un sitio controlado por un atacante env\u00ede solicitudes con credenciales al backend de Strapi. Un atacante puede explotar esto al alojar un sitio malicioso en un origen diferente (por ejemplo, un puerto diferente) y enviar solicitudes con credenciales a la API de Strapi. La vulnerabilidad est\u00e1 corregida en la versi\u00f3n 5.20.0. No existen soluciones alternativas conocidas."}], "lastModified": "2026-10-19T17:10:00.173", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:strapi:strapi:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4129AF63-8F53-43D6-8E8E-DB0FB979FF0D", "versionEndExcluding": "5.20.0"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}