Browse CVEs

MEDIUM 5.0 CVE-2024-39699 Directus is a real-time API and App dashboard for managing SQL database content. There was already a reported SSRF vulnerability via file import. It … Directus 10.9.3+ Fix from $1,6002024-07-08 HIGH 7.5 CVE-2024-36128 Directus is a real-time API and App dashboard for managing SQL database content. Prior to 10.11.2, providing a non-numeric length value to the random… Directus 10.11.2+ Fix from $1,9502024-06-03 MEDIUM 5.4 CVE-2024-34709 Directus is a real-time API and App dashboard for managing SQL database content. Prior to 10.11.0, session tokens function like the other JWT tokens … Directus 10.11.0+ Fix from $1,6002024-05-14 HIGH 8.2 CVE-2024-27295 Directus is a real-time API and App dashboard for managing SQL database content. The password reset mechanism of the Directus backend allows attacker… Directus 10.8.3+ Fix from $1,9502024-03-01 MEDIUM 5.3 CVE-2024-27296 Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 10.8.3, the exact Directus version number was being… Directus 10.8.3+ Fix from $1,6002024-03-01 MEDIUM 6.5 CVE-2023-45820 Directus is a real-time API and App dashboard for managing SQL database content. In affected versions any Directus installation that has websockets e… Directus 10.6.2+ Fix from $1,6002023-10-19 MEDIUM 6.5 CVE-2023-38503 Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 10.3.0 and prior to version 10.5.0, the permissi… Directus 10.5.0+ Fix from $1,6002023-07-25 MEDIUM 6.5 CVE-2020-19850 An issue found in Directus API v.2.2.0 allows a remote attacker to cause a denial of service via a great amount of HTTP requests. Directus Patch available Fix from $1,6002023-04-04 MEDIUM 5.5 CVE-2023-28443 Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 9.23.3, the `directus_refresh_token` is not redacte… Directus 9.23.3+ Fix from $1,6002023-03-24 HIGH 7.5 CVE-2023-26492 Directus is a real-time API and App dashboard for managing SQL database content. Directus is vulnerable to Server-Side Request Forgery (SSRF) when im… Directus 9.23.0+ Fix from $1,9502023-03-03 CRITICAL 9.8 CVE-2022-26969 In Directus before 9.7.0, the default settings of CORS_ORIGIN and CORS_ENABLED are true. Directus 9.7.0+ Fix from $2,3002022-12-26 MEDIUM 6.5 CVE-2022-36031 Directus is a free and open-source data platform for headless content management. The Directus process can be aborted by having an authorized user up… Directus 9.15.0+ Fix from $1,6002022-08-19