CVE-2023-37263

CVE-2023-37263 is a low-severity information disclosure vulnerability affecting Strapi, an open-source headless content management system, prior to version 4.12.1. It allows authenticated, highly privileged attackers to view restricted field data within relationship titles, even if they lack explicit permissions for those fields. The CVSS score is 2.7 (LOW) due to its limited impact on confidentiality and the requirement for high privileges. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.