Lucene search
+L

1 matches found

OSV
OSV
added 2025/11/13 11:6 p.m.10 views

GHSA-8JPW-GPR4-8CMH Directus's conceal fields are searchable if read permissions enabled

Summary A vulnerability allows authenticated users to search concealed/sensitive fields when they have read permissions. While actual values remain masked , successful matches can be detected through returned records, enabling enumeration attacks on sensitive data. Details The system permits sear...

6.5CVSS6.8AI score0.00276EPSS
SaveExploits0References4
Rows per page
Query Builder