Server-Side Request Forgery in Directus

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-23080 · ADVISORY
• directus/directus commit 6da3f1e · WEB
• directus/directus · PACKAGE
• mend.io/vulnerability-database/CVE-2022-23080 · WEB

Lỗ hổng khác của directus

• CVE-2023-27474TRUNG BÌNH 5.4Directus is a real-time API and App dashboard for managing SQL database content. Instances relying on an allow-listed reset URL are vulnerab…
• CVE-2022-24814TRUNG BÌNH 6.1Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 9.7.0, unauthorized JavaScript (JS) can be…
• CVE-2022-22117TRUNG BÌNH 5.4In Directus, versions 9.0.0-alpha.4 through 9.4.1 allow unrestricted file upload of .html files in the media upload functionality, which lea…
• CVE-2022-22116TRUNG BÌNH 5.4In Directus, versions 9.0.0-alpha.4 through 9.4.1 are vulnerable to stored Cross-Site Scripting (XSS) vulnerability via SVG file upload in m…
• CVE-2021-29641CAO 8.8Directus 8 before 8.8.2 allows remote authenticated users to execute arbitrary code because file-upload permissions include the ability to u…