CVE Browser

Directus: Authorization-dependent response served from unsegmented cache key

Directus: SSRF Protection Bypass via 0.0.0.0 in File Import

Directus exposes sensitive fields in revision history

Directus has a Path Traversal and Broken Access Control in File Management API

Directus: Authenticated Users Can Extract Concealed Fields via Aggregate Queries

Directus Affected by GraphQL Alias Amplification Denial-of-Service Due to Missing Query Cost/Complexity Limits

Directus GraphQL Schema SDL Disclosure Setting

Directus has a TUS Upload Authorization Bypass Allows Arbitrary File Overwrite

Directus is an Open Redirect in Admin 2FA Setup Page

Directus has an Open Redirect via Parser Bypass in OAuth2/SAML Authentication Flow

Directus has a SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses in File Import

Directus is Missing Cross-Origin Opener Policy

Directus Affected by User Enumeration via Password Reset Timing Attack

Directus has open redirect in SAML

Directus Vulnerable to Information Leakage in Existing Collections

Directus's conceal fields are searchable if read permissions enabled

Directus Vulnerable to Stored Cross-site Scripting

Directus has Improper Permission Handling on Deleted Fields

Directus allows unauthenticated file upload and file modification due to lacking input sanitization

Directus missing permission checks for manual trigger Flows

Directus's exact version number is exposed by the OpenAPI Spec

Directus doesn't redact tokens in Flow logs

Directus doesn't redact sensitive user data when logging via event hooks

Directus's webhook trigger flows can leak sensitive data

Directus `search` query parameter allows enumeration of non permitted fields