CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

RedhatCVE•added 2026/01/09 10:42 a.m.•10 views

CVE-2022-26969

In Directus before 9.7.0, the default settings of CORSORIGIN and CORSENABLED are true...

9.8CVSS6.9AI score0.00927EPSS

Exploits0References1

Vulnrichment•added 2022/12/26 12:0 a.m.•9 views

CVE-2022-26969

In Directus before 9.7.0, the default settings of CORSORIGIN and CORSENABLED are true...

6.9AI score0.00927EPSS

Exploits0References5

CVE•added 2022/12/26 12:0 a.m.•104 views

CVE-2022-26969

CVE-2022-26969 affects Directus prior to version 9.7.0, where the default settings for CORS_ORIGIN and CORS_ENABLED are true. The Red Hat and NVD entries confirm this issue, with a high-severity CVSS v3.1 base score (9.8, CRITICAL) and a network-based vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)....

9.8CVSS9.4AI score0.00927EPSS

Exploits0References5Affected Software1