Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:strapi:strapi:*:*:*:*:*:*:*:*

2 briefs RSS
high threat

China-Linked Espionage Campaign Targeting Global Infrastructure via Integrity Technology Group

Integrity Technology Group, a Chinese for-profit entity, is conducting multi-year cyber espionage targeting government, healthcare, and religious institutions using automated vulnerability scanning, credential harvesting, and specialized data exfiltration tools.

Bash +12 Integrity Technology Group espionage china cyber-espionage microsoft-365 dcsync
3t 6c 2i
high advisory

Stored Cross-Site Scripting Vulnerability in Strapi Content Manager

Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 are vulnerable to stored XSS via the WYSIWYG preview component, allowing an authenticated Author to trigger script execution in high-privilege sessions.

Strapi +1
2t 1c updated