Directus is a real-time API and App dashboard for managing SQL database content. There was already a reported SSRF vulnerability via file import. It …
Directus is a real-time API and App dashboard for managing SQL database content. Prior to 10.11.2, providing a non-numeric length value to the random…
Directus is a real-time API and App dashboard for managing SQL database content. Prior to 10.11.0, session tokens function like the other JWT tokens …
Directus is a real-time API and App dashboard for managing SQL database content. The password reset mechanism of the Directus backend allows attacker…
Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 10.8.3, the exact Directus version number was being…
Directus is a real-time API and App dashboard for managing SQL database content. In affected versions any Directus installation that has websockets e…
Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 10.3.0 and prior to version 10.5.0, the permissi…
An issue found in Directus API v.2.2.0 allows a remote attacker to cause a denial of service via a great amount of HTTP requests.
Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 9.23.3, the `directus_refresh_token` is not redacte…
Directus is a real-time API and App dashboard for managing SQL database content. Directus is vulnerable to Server-Side Request Forgery (SSRF) when im…
In Directus before 9.7.0, the default settings of CORS_ORIGIN and CORS_ENABLED are true.
Directus is a free and open-source data platform for headless content management. The Directus process can be aborted by having an authorized user up…