Rangerstudio vulnerabilities

Products

• Directus 11
• Directus 7 Api 5

Newest

• directus HTML Injection in Password Reset email to custom Reset URL in directus CVE-2023-27474 Fix available 8.0 HighMarch 6, 2023
• directus directus - SSRF which leads to internal port scan CVE-2022-23080 Fix available 5.0 MediumJune 22, 2022
• directus Cross-site Scripting in Directus CVE-2022-24814 Fix available 8.8 HighApril 4, 2022
• directus Directus - Stored Cross-Site Scripting (XSS) in Profile Avatar Image CVE-2022-22117 5.4 MediumJanuary 10, 2022
• directus Directus - Stored Cross-Site Scripting (XSS) via SVG File Upload CVE-2022-22116 5.4 MediumJanuary 10, 2022
• rangerstudio directus Directus 8 before 8.8.2 allows remote authenticated users to execute arbitrary code because file... CVE-2021-29641 8.8 HighApril 7, 2021
• rangerstudio directus ** UNSUPPORTED WHEN ASSIGNED ** In Directus 8.x through 8.8.1, an attacker can learn sensitive... CVE-2021-26595 5.3 MediumFebruary 23, 2021
• rangerstudio directus ** UNSUPPORTED WHEN ASSIGNED ** In Directus 8.x through 8.8.1, an attacker can switch to the... CVE-2021-26594 8.8 HighFebruary 23, 2021
• rangerstudio directus ** UNSUPPORTED WHEN ASSIGNED ** In Directus 8.x through 8.8.1, an attacker can see all users in... CVE-2021-26593 7.5 HighFebruary 23, 2021
• rangerstudio directus ** UNSUPPORTED WHEN ASSIGNED ** In Directus 8.x through 8.8.1, an attacker can discover whether a... CVE-2021-27583 5.3 MediumFebruary 23, 2021
• rangerstudio directus 7 api In Directus 7 API before 2.2.1, uploading of PHP files is not blocked, leading to uploads/_... CVE-2019-13979 8.8 HighJuly 19, 2019
• rangerstudio directus 7 api In Directus 7 API through 2.3.0, uploading of PHP files is blocked only when the Apache HTTP... CVE-2019-13980 8.8 HighJuly 19, 2019
• rangerstudio directus 7 api In Directus 7 API through 2.3.0, remote attackers can read image files via a direct request for a... CVE-2019-13981 5.3 MediumJuly 19, 2019
• rangerstudio directus 7 interfaces/markdown/input.vue in Directus 7 Application before 7.7.0 does not sanitize Markdown... CVE-2019-13982 5.3 MediumJuly 19, 2019
• rangerstudio directus 7 api Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a... CVE-2019-13983 9.8 CriticalJuly 19, 2019
• rangerstudio directus 7 api Directus 7 API before 2.3.0 does not validate uploaded files. Regardless of the file extension or... CVE-2019-13984 8.8 HighJuly 19, 2019
• rangerstudio directus Directus 6.4.9 has a hardcoded admin password for the Admin account because of an INSERT... CVE-2018-10723 9.8 CriticalMay 5, 2018