CVE-2021-46440: Insecure Storage of Sensitive Information

Storing passwords in a recoverable format in the DOCUMENTATION plugin component of Strapi allows an attacker to access a victim’s HTTP request, get the victim’s cookie, perform a base64 decode on the victim’s cookie, and obtain a cleartext password, leading to getting API documentation for further API attacks.