Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2026/07/15 2:17 p.m.59 views

CVE-2026-61836 Directus: Authorization-dependent response served from unsegmented cache key

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 12.0.0, when response caching is enabled, the cache-key derivation in api/src/utils/get-cache-key.ts includes version, path, query, and accountability.user but omits authorization context such as share, role...

8.6CVSS0.00272EPSS
SaveExploits0References4
Rows per page
Query Builder