• bitcoinBitcoin (BTC) $ 99,121.00
  • ethereumEthereum (ETH) $ 3,890.66
  • xrpXRP (XRP) $ 2.43
  • tetherTether (USDT) $ 0.999953
  • solanaSolana (SOL) $ 229.19
  • bnbBNB (BNB) $ 728.89
  • dogecoinDogecoin (DOGE) $ 0.440679
  • usd-coinUSDC (USDC) $ 1.00
  • cardanoCardano (ADA) $ 1.14
  • staked-etherLido Staked Ether (STETH) $ 3,886.93
  • tronTRON (TRX) $ 0.301611
  • avalanche-2Avalanche (AVAX) $ 50.38
  • shiba-inuShiba Inu (SHIB) $ 0.000030
  • the-open-networkToncoin (TON) $ 6.49
  • wrapped-stethWrapped stETH (WSTETH) $ 4,614.73
  • chainlinkChainlink (LINK) $ 24.96
  • polkadotPolkadot (DOT) $ 9.65
  • stellarStellar (XLM) $ 0.461388
  • wrapped-bitcoinWrapped Bitcoin (WBTC) $ 98,687.00
  • bitcoin-cashBitcoin Cash (BCH) $ 601.18
  • suiSui (SUI) $ 4.03
  • hedera-hashgraphHedera (HBAR) $ 0.308042
  • pepePepe (PEPE) $ 0.000026
  • wethWETH (WETH) $ 3,890.62
  • uniswapUniswap (UNI) $ 17.24
  • litecoinLitecoin (LTC) $ 125.00
  • nearNEAR Protocol (NEAR) $ 7.25
  • leo-tokenLEO Token (LEO) $ 9.38
  • wrapped-eethWrapped eETH (WEETH) $ 4,084.26
  • aptosAptos (APT) $ 13.50
  • internet-computerInternet Computer (ICP) $ 13.43
  • ethena-usdeEthena USDe (USDE) $ 1.00
  • polygon-ecosystem-tokenPOL (ex-MATIC) (POL) $ 0.649389
  • usdsUSDS (USDS) $ 0.999991
  • ethereum-classicEthereum Classic (ETC) $ 34.76
  • vechainVeChain (VET) $ 0.063675
  • crypto-com-chainCronos (CRO) $ 0.188149
  • render-tokenRender (RENDER) $ 9.72
  • bittensorBittensor (TAO) $ 671.16
  • fetch-aiArtificial Superintelligence Alliance (FET) $ 1.89
  • kaspaKaspa (KAS) $ 0.177428
  • arbitrumArbitrum (ARB) $ 1.08
  • hyperliquidHyperliquid (HYPE) $ 13.21
  • filecoinFilecoin (FIL) $ 7.18
  • aaveAave (AAVE) $ 272.64
  • mantleMantle (MNT) $ 1.17
  • algorandAlgorand (ALGO) $ 0.468477
  • mantra-daoMANTRA (OM) $ 4.13
  • blockstackStacks (STX) $ 2.50
  • moneroMonero (XMR) $ 201.60
  • cosmosCosmos Hub (ATOM) $ 9.42
  • bitget-tokenBitget Token (BGB) $ 2.61
  • whitebitWhiteBIT Coin (WBT) $ 24.98
  • fantomFantom (FTM) $ 1.24
  • celestiaCelestia (TIA) $ 7.74
  • okbOKB (OKB) $ 57.35
  • dogwifcoindogwifhat (WIF) $ 3.41
  • daiDai (DAI) $ 1.00
  • bonkBonk (BONK) $ 0.000043
  • immutable-xImmutable (IMX) $ 1.92
  • optimismOptimism (OP) $ 2.49
  • injective-protocolInjective (INJ) $ 31.09
  • ethenaEthena (ENA) $ 0.990816
  • theta-tokenTheta Network (THETA) $ 2.85
  • the-graphThe Graph (GRT) $ 0.295072
  • worldcoin-wldWorldcoin (WLD) $ 3.45
  • sei-networkSei (SEI) $ 0.637377
  • flokiFLOKI (FLOKI) $ 0.000260
  • solana-swapSolana Swap (SOS) $ 3.29
  • thorchainTHORChain (RUNE) $ 6.99
  • binance-peg-wethBinance-Peg WETH (WETH) $ 3,894.85
  • galaGALA (GALA) $ 0.055957
  • ondo-financeOndo (ONDO) $ 1.61
  • jasmycoinJasmyCoin (JASMY) $ 0.044537
  • coinbase-wrapped-btcCoinbase Wrapped BTC (CBBTC) $ 99,066.00
  • the-sandboxThe Sandbox (SAND) $ 0.847742
  • rocket-pool-ethRocket Pool ETH (RETH) $ 4,363.47
  • based-brettBrett (BRETT) $ 0.197129
  • eosEOS (EOS) $ 1.22
  • makerMaker (MKR) $ 2,059.25
  • mantle-staked-etherMantle Staked Ether (METH) $ 4,087.97
  • lido-daoLido DAO (LDO) $ 2.01
  • first-digital-usdFirst Digital USD (FDUSD) $ 0.998772
  • beam-2Beam (BEAM) $ 0.033791
  • pyth-networkPyth Network (PYTH) $ 0.474361
  • kaiaKaia (KAIA) $ 0.289961
  • dydx-chaindYdX (DYDX) $ 2.36
  • jupiter-exchange-solanaJupiter (JUP) $ 1.24
  • flowFlow (FLOW) $ 1.07
  • iotaIOTA (IOTA) $ 0.467698
  • tezosTezos (XTZ) $ 1.62
  • arweaveArweave (AR) $ 24.93
  • flare-networksFlare (FLR) $ 0.029538
  • starknetStarknet (STRK) $ 0.711491
  • kelp-dao-restaked-ethKelp DAO Restaked ETH (RSETH) $ 4,020.39
  • kucoin-sharesKuCoin (KCS) $ 13.30
  • gatechain-tokenGate (GT) $ 12.61
  • virtual-protocolVirtuals Protocol (VIRTUAL) $ 1.58
  • renzo-restaked-ethRenzo Restaked ETH (EZETH) $ 4,001.96
  • stauSTAU (STAU) $ 0.156280
  • aerodrome-financeAerodrome Finance (AERO) $ 2.16
  • bitcoin-svBitcoin SV (BSV) $ 75.03
  • solv-btcSolv Protocol SolvBTC (SOLVBTC) $ 98,924.00
  • heliumHelium (HNT) $ 8.30
  • mog-coinMog Coin (MOG) $ 0.000004
  • movementMovement (MOVE) $ 0.676692
  • elrond-erd-2MultiversX (EGLD) $ 50.67
  • bittorrentBitTorrent (BTT) $ 0.000001
  • raydiumRaydium (RAY) $ 4.76
  • neoNEO (NEO) $ 19.56
  • fasttokenFasttoken (FTN) $ 3.22
  • curve-dao-tokenCurve DAO (CRV) $ 1.09
  • axie-infinityAxie Infinity (AXS) $ 8.65
  • xdce-crowd-saleXDC Network (XDC) $ 0.089549
  • tokenize-xchangeTokenize Xchange (TKX) $ 16.65
  • coredaoorgCore (CORE) $ 1.43
  • popcatPopcat (POPCAT) $ 1.34
  • peanut-the-squirrelPeanut the Squirrel (PNUT) $ 1.31
  • decentralandDecentraland (MANA) $ 0.693398
  • ethereum-name-serviceEthereum Name Service (ENS) $ 39.00
  • matic-networkPolygon (MATIC) $ 0.649300
  • msolMarinade Staked SOL (MSOL) $ 285.02
  • apecoinApeCoin (APE) $ 1.70
  • aioz-networkAIOZ Network (AIOZ) $ 1.08
  • lombard-staked-btcLombard Staked BTC (LBTC) $ 99,123.00
  • pancakeswap-tokenPancakeSwap (CAKE) $ 3.94
  • binance-staked-solBinance Staked SOL (BNSOL) $ 233.51
  • chilizChiliz (CHZ) $ 0.121218
  • ether-fi-staked-ethether.fi Staked ETH (EETH) $ 3,888.39
  • mantle-restaked-ethMantle Restaked ETH (CMETH) $ 4,089.62
  • conflux-tokenConflux (CFX) $ 0.228179
  • dydxdYdX (ETHDYDX) $ 2.36
  • havvenSynthetix Network (SNX) $ 3.14
  • akash-networkAkash Network (AKT) $ 4.20
  • zcashZcash (ZEC) $ 66.26
  • pendlePendle (PENDLE) $ 6.29
  • mina-protocolMina Protocol (MINA) $ 0.864737
  • solv-protocol-solvbtc-bbnSolv Protocol SolvBTC.BBN (SOLVBTC.BB) $ 98,463.00
  • eigenlayerEigenlayer (EIGEN) $ 4.75
  • wormholeWormhole (W) $ 0.356905
  • compound-governance-tokenCompound (COMP) $ 111.78
  • ecasheCash (XEC) $ 0.000050
  • notcoinNotcoin (NOT) $ 0.009394
  • nexoNEXO (NEXO) $ 1.49
  • ordinalsORDI (ORDI) $ 45.13
  • jupiter-staked-solJupiter Staked SOL (JUPSOL) $ 243.36
  • neiro-3Neiro (NEIRO) $ 0.002210
  • jito-governance-tokenJito (JTO) $ 3.51
  • baby-doge-coinBaby Doge Coin (BABYDOGE) $ 0.00000001
  • arbitrum-bridged-wbtc-arbitrum-oneArbitrum Bridged WBTC (Arbitrum One) (WBTC) $ 98,666.00
  • binance-peg-dogecoinBinance-Peg Dogecoin (DOGE) $ 0.440473
  • superfarmSuperVerse (SUPER) $ 2.01
  • amp-tokenAmp (AMP) $ 0.011213
  • l2-standard-bridged-weth-baseL2 Standard Bridged WETH (Base) (WETH) $ 3,890.34
  • dog-go-to-the-moon-runeDOG•GO•TO•THE•MOON (Runes) (DOG) $ 0.008738
  • arbitrum-bridged-weth-arbitrum-oneArbitrum Bridged WETH (Arbitrum One) (WETH) $ 3,891.96
  • zksyncZKsync (ZK) $ 0.233034
  • oasis-networkOasis (ROSE) $ 0.124770
  • axelarAxelar (AXL) $ 0.965694
  • turboTurbo (TURBO) $ 0.012153
  • cat-in-a-dogs-worldcat in a dogs world (MEW) $ 0.009271
  • terra-lunaTerra Luna Classic (LUNC) $ 0.000149
  • reserve-rights-tokenReserve Rights (RSR) $ 0.015346
  • roninRonin (RON) $ 2.19
  • blurBlur (BLUR) $ 0.379871
  • 1inch1inch (1INCH) $ 0.545933
  • gnosisGnosis (GNO) $ 287.23
  • echelon-primeEchelon Prime (PRIME) $ 14.45
  • usddUSDD (USDD) $ 0.998748
  • arkhamArkham (ARKM) $ 2.27
  • livepeerLivepeer (LPT) $ 19.69
  • nervos-networkNervos Network (CKB) $ 0.015705
  • safeSafe (SAFE) $ 1.39
  • goatseus-maximusGoatseus Maximus (GOAT) $ 0.709053
  • coinbase-wrapped-staked-ethCoinbase Wrapped Staked ETH (CBETH) $ 4,222.58
  • kavaKava (KAVA) $ 0.650219
  • layerzeroLayerZero (ZRO) $ 6.31
  • grassGrass (GRASS) $ 2.86
  • book-of-memeBOOK OF MEME (BOME) $ 0.009860
  • kusamaKusama (KSM) $ 41.71
  • tether-goldTether Gold (XAUT) $ 2,668.36
  • dashDash (DASH) $ 54.40
  • usual-usdUsual USD (USD0) $ 1.00
  • super-oethSuper OETH (SUPEROETHB) $ 3,893.62
  • fraxFrax (FRAX) $ 0.996074
  • apenftAPENFT (NFT) $ 0.00000064
  • holotokenHolo (HOT) $ 0.003544
  • sats-ordinalsSATS (Ordinals) (SATS) $ 0.00000030
  • bitcoin-goldBitcoin Gold (BTG) $ 35.08
  • zilliqaZilliqa (ZIL) $ 0.031857
  • creditcoin-2Creditcoin (CTC) $ 1.49
  • ether-fi-staked-btcEther.fi Staked BTC (EBTC) $ 99,216.00
  • spx6900SPX6900 (SPX) $ 0.651595
  • dexeDeXe (DEXE) $ 10.59
  • woo-networkWOO (WOO) $ 0.322740
  • 0x0x Protocol (ZRX) $ 0.704537
  • astarAstar (ASTR) $ 0.080339
  • trust-wallet-tokenTrust Wallet (TWT) $ 1.42
  • enjincoinEnjin Coin (ENJ) $ 0.333502
  • chex-tokenCHEX Token (CHEX) $ 0.591061

CMS Strapi Issues Security Disclosure of Vulnerabilities

0 289

CMS Strapi Issues Security Disclosure of Vulnerabilities

Strapi, the open-source headless Content Management System (CMS) issued a security disclosure of vulnerabilities alerting users to upgrade their Strapi version 3.x.x as it expired on December 31, 2022. The platform cautioned the users to immediately get updated to the 4.x.x version if their current version is 3.x.x or below.

Subsequent to the security alert, the Chinese reporter Collin Wu, invited the attention of the Twitter community by posting on his official page, Wu Blockchain, creating awareness of the issue:

CMS Strapi issued a security alert that attackers can use known vulnerabilities to take over Admin accounts or RCE to take over server permissions. There are a large number of projects in the cryptocurrency industry using this product, please upgrade immediately.

— Wu Blockchain (@WuBlockchain) April 23, 2023

Notably, the reporter added that the vulnerability could be misused by the attackers to take over the Admin accounts; he suggested that it would be better to upgrade as soon as possible as there exists a “large number of projects in the cryptocurrency industry” depending on the project.

Significantly, Strapi proclaimed that the researcher reported on December 29, 2022, that the server-side template injection (SSTI) vulnerability has been impacting their users-permission plugin’s email template system.

In detail, the SSTI vulnerability facilitated the modification of the default email template, executing “malicious code” through remote code execution (RCE).

It is noteworthy that Strapi wasn’t interested in elaborating on the in-depth details of the vulnerabilities, instead, the platform wanted to “communicate on the IoCs (indicators of compromise)”, thereby directing the users to analyze whether they have been affected.

Further, Strapi notified that the vulnerability is likely to affect all the Strapi v3 and Strapi v4 versions prior to v4.5.6, and advised the users to upgrade beyond v4.8.0.

Source

Leave A Reply

Your email address will not be published.