7.5Hoch
Nuxt Content: Unauthenticated SQLite Function DoS via Content Query API
nuxt content
Nuxt Content is the file-based CMS for Nuxt applications, powered by Markdown and Vue components. From 3.0.0 until 3.15.2, the unauthenticated POST /__nuxt_content/:collection/query endpoint accepts an attacker-controlled sql field in src/runtime/api/query.po…