CVE-2023-22894

Vendor

Strapi

Product

Strapi

EPSS

0.041 (p91)

CISA KEV

added 8 Oct 2026, due 11 Oct 2026 (21d overdue)

Weakness

CWE-312

Exposure class

Web platform, Edge / VPN / firewall

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 56
   KEV CISA KEV 24d ago

   Strapi Cleartext Storage of Sensitive Information Vulnerability

   Strapi contains a cleartext storage of sensitive information vulnerability that could allow attackers with access to the admin panel to discover sensitive user details via the query filter. The impacted product(s) could be…

   KEV · due 11 Oct 2026 (overdue) Fix available CVE-2023-22894 Strapi
2. 28
   CISA advisory CISA 23d ago

   Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data

   Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Original Publication October 8, 2026 Executive Summary Chinese government-linked cyber…

   CVE-2014-6278CVE-2015-3306CVE-2015-5477+5 more Microsoft Google