CVE-2019-19609
Strapi Framework Vulnerable to Remote Code Execution
well, I didnt found any exploit for CVE-2019-19609 so I wrote one. :/
Usage
python3 exploit.py <rhost> <lhost> <jwt> <url>
A video
More Information
https://hack-fast.herokuapp.com/cve/CVE-2019-19609
https://github.com/strapi/strapi/pull/4636