CVE-2022-22116

概要

参考情報

• directus/directus commit ec86d54 · Patch
• whitesourcesoftware.com/vulnerability-database/CVE-2022-22116 · Exploit

directus のその他の脆弱性

• CVE-2023-27474中 5.4Directus is a real-time API and App dashboard for managing SQL database content. Instances relying on an allow-listed reset URL are vulnerab…
• CVE-2022-23080中 5.0In directus versions v9.0.0-beta.2 through 9.6.0 are vulnerable to server-side request forgery (SSRF) in the media upload functionality whic…
• CVE-2022-24814中 6.1Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 9.7.0, unauthorized JavaScript (JS) can be…
• CVE-2022-22117中 5.4In Directus, versions 9.0.0-alpha.4 through 9.4.1 allow unrestricted file upload of .html files in the media upload functionality, which lea…
• CVE-2021-29641高 8.8Directus 8 before 8.8.2 allows remote authenticated users to execute arbitrary code because file-upload permissions include the ability to u…