Lucene search

CVE-2023-26492

🗓️ 03 Mar 2023 22:09:15Reported by [email protected]Type

Directus SSRF vulnerability fixed in version 9.23.

Reporter	Title	Published	Views	Family All 9
Vulnrichment	CVE-2023-26492 Directus vulnerable to Server-Side Request Forgery On File Import	3 Mar 202321:49	–	vulnrichment
Prion	Server side request forgery (ssrf)	3 Mar 202322:15	–	prion
Cvelist	CVE-2023-26492 Directus vulnerable to Server-Side Request Forgery On File Import	3 Mar 202321:49	–	cvelist
CVE	CVE-2023-26492	3 Mar 202322:15	–	cve
OSV	CVE-2023-26492	3 Mar 202322:15	–	osv
OSV	Directus vulnerable to Server-Side Request Forgery On File Import	3 Mar 202323:07	–	osv
Veracode	Server-side Request Forgery (SSRF)	12 Mar 202312:40	–	veracode
Github Security Blog	Directus vulnerable to Server-Side Request Forgery On File Import	3 Mar 202323:07	–	github
Wallarm Lab	Predictions for 2023 from Latest API Threat Research \| API Security Newsletter	9 Mar 202313:10	–	wallarmlab

Nvd

Node

monospace directusRange<9.23.0node.js

Source	Link
github	www.github.com/directus/directus/releases/tag/v9.23.0
github	www.github.com/directus/directus/security/advisories/GHSA-j3rg-3rgm-537h
github	www.github.com/directus/directus/commit/ff53d3e69a602d05342e15d9bb616884833ddbff

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

03 Mar 2023 22:15Current

6.2Medium risk

Vulners AI Score6.2

CVSS37.5

EPSS0.00144

CWE-918