CVE-2021-26594

creationtimestamp| type| source ---|---|--- 2021-02-23 22:35:21+00:00| seen| https://t.me/cibsecurity/24030...

CVE-2021-26594

CVE-2021-26594 affects Directus 8.x through 8.8.1, where an attacker can switch to the administrator role via PATCH without backend checks. The vulnerability is limited to products no longer supported by the maintainer. Remediation in public docs advises upgrading to a supported Directus version;...