Lucene search
HistoryJan 10, 2022 - 4:15 p.m.
CVE-2022-22117
directus
unrestricted file upload
xss
cve-2022-22117
security vulnerability
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
21.5%
In Directus, versions 9.0.0-alpha.4 through 9.4.1 allow unrestricted file upload of .html files in the media upload functionality, which leads to Cross-Site Scripting vulnerability. A low privileged attacker can upload a crafted HTML file as a profile avatar, and when an admin or another user opens it, the XSS payload gets triggered.
Affected configurations
Node
rangerstudiodirectusRange9.0.1–9.4.1
ORrangerstudiodirectusMatch9.0.0-
ORrangerstudiodirectusMatch9.0.0alpha10
ORrangerstudiodirectusMatch9.0.0alpha11
ORrangerstudiodirectusMatch9.0.0alpha12
ORrangerstudiodirectusMatch9.0.0alpha13
ORrangerstudiodirectusMatch9.0.0alpha14
ORrangerstudiodirectusMatch9.0.0alpha15
ORrangerstudiodirectusMatch9.0.0alpha16
ORrangerstudiodirectusMatch9.0.0alpha17
ORrangerstudiodirectusMatch9.0.0alpha18
ORrangerstudiodirectusMatch9.0.0alpha19
ORrangerstudiodirectusMatch9.0.0alpha20
ORrangerstudiodirectusMatch9.0.0alpha21
ORrangerstudiodirectusMatch9.0.0alpha22
ORrangerstudiodirectusMatch9.0.0alpha23
ORrangerstudiodirectusMatch9.0.0alpha24
ORrangerstudiodirectusMatch9.0.0alpha25
ORrangerstudiodirectusMatch9.0.0alpha26
ORrangerstudiodirectusMatch9.0.0alpha27
ORrangerstudiodirectusMatch9.0.0alpha31
ORrangerstudiodirectusMatch9.0.0alpha32
ORrangerstudiodirectusMatch9.0.0alpha33
ORrangerstudiodirectusMatch9.0.0alpha34
ORrangerstudiodirectusMatch9.0.0alpha35
ORrangerstudiodirectusMatch9.0.0alpha36
ORrangerstudiodirectusMatch9.0.0alpha37
ORrangerstudiodirectusMatch9.0.0alpha38
ORrangerstudiodirectusMatch9.0.0alpha39
ORrangerstudiodirectusMatch9.0.0alpha4
ORrangerstudiodirectusMatch9.0.0alpha40
ORrangerstudiodirectusMatch9.0.0alpha41
ORrangerstudiodirectusMatch9.0.0alpha42
ORrangerstudiodirectusMatch9.0.0alpha5
ORrangerstudiodirectusMatch9.0.0alpha6
ORrangerstudiodirectusMatch9.0.0alpha7
ORrangerstudiodirectusMatch9.0.0alpha8
ORrangerstudiodirectusMatch9.0.0alpha9
ORrangerstudiodirectusMatch9.0.0beta0
ORrangerstudiodirectusMatch9.0.0beta1
ORrangerstudiodirectusMatch9.0.0beta10
ORrangerstudiodirectusMatch9.0.0beta11
ORrangerstudiodirectusMatch9.0.0beta12
ORrangerstudiodirectusMatch9.0.0beta13
ORrangerstudiodirectusMatch9.0.0beta14
ORrangerstudiodirectusMatch9.0.0beta2
ORrangerstudiodirectusMatch9.0.0beta3
ORrangerstudiodirectusMatch9.0.0beta4
ORrangerstudiodirectusMatch9.0.0beta5
ORrangerstudiodirectusMatch9.0.0beta7
ORrangerstudiodirectusMatch9.0.0beta8
ORrangerstudiodirectusMatch9.0.0beta9
ORrangerstudiodirectusMatch9.0.0rc0
ORrangerstudiodirectusMatch9.0.0rc1
ORrangerstudiodirectusMatch9.0.0rc10
ORrangerstudiodirectusMatch9.0.0rc100
ORrangerstudiodirectusMatch9.0.0rc101
ORrangerstudiodirectusMatch9.0.0rc11
ORrangerstudiodirectusMatch9.0.0rc12
ORrangerstudiodirectusMatch9.0.0rc13
ORrangerstudiodirectusMatch9.0.0rc14
ORrangerstudiodirectusMatch9.0.0rc15
ORrangerstudiodirectusMatch9.0.0rc17
ORrangerstudiodirectusMatch9.0.0rc18
ORrangerstudiodirectusMatch9.0.0rc19
ORrangerstudiodirectusMatch9.0.0rc2
ORrangerstudiodirectusMatch9.0.0rc20
ORrangerstudiodirectusMatch9.0.0rc21
ORrangerstudiodirectusMatch9.0.0rc22
ORrangerstudiodirectusMatch9.0.0rc23
ORrangerstudiodirectusMatch9.0.0rc24
ORrangerstudiodirectusMatch9.0.0rc25
ORrangerstudiodirectusMatch9.0.0rc26
ORrangerstudiodirectusMatch9.0.0rc27
ORrangerstudiodirectusMatch9.0.0rc28
ORrangerstudiodirectusMatch9.0.0rc29
ORrangerstudiodirectusMatch9.0.0rc3
ORrangerstudiodirectusMatch9.0.0rc30
ORrangerstudiodirectusMatch9.0.0rc31
ORrangerstudiodirectusMatch9.0.0rc32
ORrangerstudiodirectusMatch9.0.0rc33
ORrangerstudiodirectusMatch9.0.0rc34
ORrangerstudiodirectusMatch9.0.0rc35
ORrangerstudiodirectusMatch9.0.0rc36
ORrangerstudiodirectusMatch9.0.0rc37
ORrangerstudiodirectusMatch9.0.0rc38
ORrangerstudiodirectusMatch9.0.0rc39
ORrangerstudiodirectusMatch9.0.0rc4
ORrangerstudiodirectusMatch9.0.0rc40
ORrangerstudiodirectusMatch9.0.0rc41
ORrangerstudiodirectusMatch9.0.0rc42
ORrangerstudiodirectusMatch9.0.0rc43
ORrangerstudiodirectusMatch9.0.0rc44
ORrangerstudiodirectusMatch9.0.0rc45
ORrangerstudiodirectusMatch9.0.0rc46
ORrangerstudiodirectusMatch9.0.0rc47
ORrangerstudiodirectusMatch9.0.0rc48
ORrangerstudiodirectusMatch9.0.0rc49
ORrangerstudiodirectusMatch9.0.0rc5
ORrangerstudiodirectusMatch9.0.0rc50
ORrangerstudiodirectusMatch9.0.0rc51
ORrangerstudiodirectusMatch9.0.0rc52
ORrangerstudiodirectusMatch9.0.0rc53
ORrangerstudiodirectusMatch9.0.0rc54
ORrangerstudiodirectusMatch9.0.0rc55
ORrangerstudiodirectusMatch9.0.0rc56
ORrangerstudiodirectusMatch9.0.0rc57
ORrangerstudiodirectusMatch9.0.0rc58
ORrangerstudiodirectusMatch9.0.0rc59
ORrangerstudiodirectusMatch9.0.0rc6
ORrangerstudiodirectusMatch9.0.0rc60
ORrangerstudiodirectusMatch9.0.0rc61
ORrangerstudiodirectusMatch9.0.0rc62
ORrangerstudiodirectusMatch9.0.0rc63
ORrangerstudiodirectusMatch9.0.0rc64
ORrangerstudiodirectusMatch9.0.0rc65
ORrangerstudiodirectusMatch9.0.0rc66
ORrangerstudiodirectusMatch9.0.0rc67
ORrangerstudiodirectusMatch9.0.0rc68
ORrangerstudiodirectusMatch9.0.0rc69
ORrangerstudiodirectusMatch9.0.0rc7
ORrangerstudiodirectusMatch9.0.0rc70
ORrangerstudiodirectusMatch9.0.0rc71
ORrangerstudiodirectusMatch9.0.0rc72
ORrangerstudiodirectusMatch9.0.0rc73
ORrangerstudiodirectusMatch9.0.0rc74
ORrangerstudiodirectusMatch9.0.0rc75
ORrangerstudiodirectusMatch9.0.0rc76
ORrangerstudiodirectusMatch9.0.0rc77
ORrangerstudiodirectusMatch9.0.0rc78
ORrangerstudiodirectusMatch9.0.0rc79
ORrangerstudiodirectusMatch9.0.0rc8
ORrangerstudiodirectusMatch9.0.0rc80
ORrangerstudiodirectusMatch9.0.0rc81
ORrangerstudiodirectusMatch9.0.0rc82
ORrangerstudiodirectusMatch9.0.0rc83
ORrangerstudiodirectusMatch9.0.0rc84
ORrangerstudiodirectusMatch9.0.0rc85
ORrangerstudiodirectusMatch9.0.0rc86
ORrangerstudiodirectusMatch9.0.0rc87
ORrangerstudiodirectusMatch9.0.0rc88
ORrangerstudiodirectusMatch9.0.0rc89
ORrangerstudiodirectusMatch9.0.0rc9
ORrangerstudiodirectusMatch9.0.0rc90
ORrangerstudiodirectusMatch9.0.0rc91
ORrangerstudiodirectusMatch9.0.0rc92
ORrangerstudiodirectusMatch9.0.0rc93
ORrangerstudiodirectusMatch9.0.0rc94
ORrangerstudiodirectusMatch9.0.0rc95
ORrangerstudiodirectusMatch9.0.0rc96
ORrangerstudiodirectusMatch9.0.0rc97
ORrangerstudiodirectusMatch9.0.0rc98
ORrangerstudiodirectusMatch9.0.0rc99
| CPE | Name | Operator | Version |
|---|---|---|---|
| rangerstudio:directus | rangerstudio directus | le | 9.4.1 |
| rangerstudio:directus | rangerstudio directus | eq | 9.0.0 |
CNA Affected
[
{
"product": "directus",
"vendor": "directus",
"versions": [
{
"lessThan": "unspecified",
"status": "affected",
"version": "9.0.0",
"versionType": "custom"
},
{
"lessThanOrEqual": "9.4.1",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
osv
osv
CVE-2022-22117
2022-01-10 16:15:10
nvd
nvd
CVE-2022-22117
2022-01-10 16:15:10
prion
prion
Unrestricted file upload
2022-01-10 16:15:00
cvelist
cvelist
cnvd
cnvd
Directus Cross-Site Scripting Vulnerability (CNVD-2022-08389)
2022-01-14 00:00:00
3.5 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
5.4 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
21.5%
Related for CVE-2022-22117