Lucene search
+L

4 matches found

osv_ghsa
osv_ghsa
•added 2025/11/14 9:45 p.m.•18 views

GHSA-9X5G-62GJ-WQF2 Directus has Improper Permission Handling on Deleted Fields

Summary Directus does not properly clean up field-level permissions when a field is deleted. If a new field with the same name is created later, the system automatically re-applies the old permissions, which can lead to unauthorized access. Details When a field is removed from a collection, its...

4.6CVSS5.7AI score0.00205EPSS
SaveExploits1References4
Rows per page
Query Builder