Strapi 5.0.0-5.5.1 - Unauthenticated Private Field Exposure via Lookup Operator
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-56143. PoCs published by exploitintel.
AI-analyzed exploit summary This repository contains functional exploit code for CVE-2024-56143, an IDOR vulnerability in Strapi 5 that allows unauthenticated attackers to extract sensitive data (e.g., admin password hashes, emails, reset tokens) via the `lookup` parameter injection. The PoCs include blind password hash extraction, email enumeration, and full account takeover.
Description
Strapi is an open-source headless content management system. In versions from 5.0.0 to before 5.5.2, the lookup operator provided by the document service does not properly sanitize query parameters for private fields. An attacker can access private fields, including admin passwords and reset tokens, by crafting queries with the lookup parameter. This vulnerability is fixed in 5.5.2.
Exploits (1)
This repository contains functional exploit code for CVE-2024-56143, an IDOR vulnerability in Strapi 5 that allows unauthenticated attackers to extract sensitive data (e.g., admin password hashes, emails, reset tokens) via the `lookup` parameter injection. The PoCs include blind password hash extraction, email enumeration, and full account takeover.
References (2)
Related Analysis
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
