PT-2023-29709 · Directus · Directus

Name of the Vulnerable Software and Affected Versions: Directus versions prior to 10.6.2 Description: Directus is a real-time API and App dashboard for managing SQL database content. In affected versions, any Directus installation that has websockets enabled can be crashed if the websocket server...

CVE-2023-45820: Improper Handling of Exceptional Conditions

Directus is a real-time API and App dashboard for managing SQL database content. In affected versions any Directus installation that has websockets enabled can be crashed if the websocket server receives an invalid frame. A malicious user could leverage this bug to crash Directus. This issue has...

io.quarkus:quarkus-resteasy-reactive-servlet (1.11.7.final), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.11.7.final) +3 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.11.7.final)

io.quarkus:quarkus-undertow MAVEN version 1.11.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.11.7.final -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.11.6.final), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.11.6.final) +3 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.11.6.final)

io.quarkus:quarkus-undertow MAVEN version 1.11.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.11.6.final -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.11.3.final), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.11.3.final) +3 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.11.3.final)

io.quarkus:quarkus-undertow MAVEN version 1.11.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.11.3.final -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.11.0.cr1), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.11.0.cr1) +3 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.11.0.cr1)

io.quarkus:quarkus-undertow MAVEN version 1.11.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.11.0.cr1 -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.11.0.beta2), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.11.0.beta2) +3 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.11.0.beta2)

io.quarkus:quarkus-undertow MAVEN version 1.11.0.beta2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.11.0.beta2 -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.11.0.beta1), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.11.0.beta1) +3 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.11.0.beta1)

io.quarkus:quarkus-undertow MAVEN version 1.11.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.11.0.beta1 -...

io.quarkus:quarkus-undertow-deployment (1.10.4.final), io.quarkus:quarkus-undertow-websockets (1.10.4.final) +1 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.10.4.final)

io.quarkus:quarkus-undertow MAVEN version 1.10.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-undertow-deployment 1.10.4.final - io.quarkus:quarkus-undertow-websockets...

io.quarkus:quarkus-undertow-deployment (1.10.2.final), io.quarkus:quarkus-undertow-websockets (1.10.2.final) +1 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.10.2.final)

io.quarkus:quarkus-undertow MAVEN version 1.10.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-undertow-deployment 1.10.2.final - io.quarkus:quarkus-undertow-websockets...

io.quarkus:quarkus-undertow-deployment (1.10.0.cr1), io.quarkus:quarkus-undertow-websockets (1.10.0.cr1) +1 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.10.0.cr1)

io.quarkus:quarkus-undertow MAVEN version 1.10.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-undertow-deployment 1.10.0.cr1 - io.quarkus:quarkus-undertow-websockets 1.10.0.cr...

io.quarkus:quarkus-undertow-deployment (1.8.2.final), io.quarkus:quarkus-undertow-websockets (1.8.2.final) +1 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.8.2.final)

io.quarkus:quarkus-undertow MAVEN version 1.8.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-undertow-deployment 1.8.2.final - io.quarkus:quarkus-undertow-websockets...

io.quarkus:quarkus-undertow-deployment (1.7.6.final), io.quarkus:quarkus-undertow-websockets (1.7.6.final) +1 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.7.6.final)

io.quarkus:quarkus-undertow MAVEN version 1.7.6.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-undertow-deployment 1.7.6.final - io.quarkus:quarkus-undertow-websockets...

io.quarkus:quarkus-undertow-deployment (1.9.2.final), io.quarkus:quarkus-undertow-websockets (1.9.2.final) +1 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.9.2.final)

io.quarkus:quarkus-undertow MAVEN version 1.9.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-undertow-deployment 1.9.2.final - io.quarkus:quarkus-undertow-websockets...

io.quarkus:quarkus-undertow-deployment (1.9.1.final), io.quarkus:quarkus-undertow-websockets (1.9.1.final) +1 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.9.1.final)

io.quarkus:quarkus-undertow MAVEN version 1.9.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-undertow-deployment 1.9.1.final - io.quarkus:quarkus-undertow-websockets...

io.quarkus:quarkus-undertow-deployment (1.8.0.cr1), io.quarkus:quarkus-undertow-websockets (1.8.0.cr1) +1 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.8.0.cr1)

io.quarkus:quarkus-undertow MAVEN version 1.8.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-undertow-deployment 1.8.0.cr1 - io.quarkus:quarkus-undertow-websockets 1.8.0.cr1 -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.13.4.final), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.13.4.final) +2 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.13.4.final)

io.quarkus:quarkus-undertow MAVEN version 1.13.4.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.13.4.final -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.13.0.cr1), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.13.0.cr1) +2 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.13.0.cr1)

io.quarkus:quarkus-undertow MAVEN version 1.13.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.13.0.cr1 -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.13.7.final), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.13.7.final) +2 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.13.7.final)

io.quarkus:quarkus-undertow MAVEN version 1.13.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.13.7.final -...

io.quarkus:quarkus-resteasy-reactive-servlet (1.13.3.final), io.quarkus:quarkus-resteasy-reactive-servlet-deployment (1.13.3.final) +80 more potentially affected by CVE-2023-4853 via io.quarkus:quarkus-undertow (1.13.3.final)

io.quarkus:quarkus-undertow MAVEN version 1.13.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-undertow and may be impacted: - io.quarkus:quarkus-resteasy-reactive-servlet 1.13.3.final -...