CVE-2020-27664: Authorization bypass in Strapi

Severity: Critical

CVSS Score: 9.8

admin/src/containers/InputModalStepperProvider/index.js in Strapi before 3.2.5 has unwanted /proxy?url= functionality.