Skip to contentDirectus vulnerabilities
Newest
- directusDirectus has Incorrect Permission Checking for GraphQL SubscriptionsCVE-2023-38503Fix available5.7 Medium
- directusdirectus vulnerable to Insertion of Sensitive Information into Log FileCVE-2023-28443Fix available4.2 Medium
- directusExtract password hashes through export querying in directusCVE-2023-27481Fix available4.3 Medium
- directusHTML Injection in Password Reset email to custom Reset URL in directusCVE-2023-27474Fix available8.0 High
- directusDirectus vulnerable to Server-Side Request Forgery On File ImportCVE-2023-26492Fix available5.0 Medium
- directusUnhandled exception on illegal filename_disk valueCVE-2022-36031Fix available6.5 Medium
- directusdirectus - SSRF which leads to internal port scanCVE-2022-23080Fix available5.0 Medium
- directusCross-site Scripting in DirectusCVE-2022-24814Fix available8.8 High
- directusDirectus - Stored Cross-Site Scripting (XSS) in Profile Avatar ImageCVE-2022-221175.4 Medium
- directusDirectus - Stored Cross-Site Scripting (XSS) via SVG File UploadCVE-2022-221165.4 Medium