4 matches found
GHSA-C6W9-5G5J-JH2P Directus: Authorization-dependent response served from unsegmented cache key
Summary When response caching is enabled CACHEENABLED=true, the cache-key derivation in api/src/utils/get-cache-key.ts includes only version, path, query, and accountability.user plus a conditional ip. Authorization context beyond user share, role, roles, admin, app, policies is not part of the...
8.6CVSS5.5AI score0.00272EPSS
SaveExploits0References6
PT-2026-61476
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the netfs component where the zero point—the file position from which the system assumes the server will return zeros to avoid unnecessary reads—is updated incorrectly...
5.2AI score0.00155EPSS
SaveExploits0
20