CVE-2022-36031

Directus is a free and open-source data platform for headless content management. The Directus process can be aborted by having an authorized user update the filenamedisk value to a folder and accessing that file through the /assets endpoint. This vulnerability has been patched and release v9.15....

dbaas (>=0.1.6, <=0.5.1) potentially affected by CVE-2022-36031 via directus (9.6.0)

directus NPM version 9.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on directus and may be impacted: - dbaas =0.1.6, =0.5.1 Source cves: CVE-2022-36031 Source advisory: OSV:GHSA-77QM-WVQQ-FG79...

CVE-2022-36031

creationtimestamp| type| source ---|---|--- 2022-08-20 00:17:47+00:00| seen| https://t.me/cibsecurity/48462...

CVE-2022-36031 Unhandled exception on illegal filename_disk value

Directus is a free and open-source data platform for headless content management. The Directus process can be aborted by having an authorized user update the filenamedisk value to a folder and accessing that file through the /assets endpoint. This vulnerability has been patched and release v9.15....