Lucene search
+L

2 matches found

Cvelist
Cvelist
added 2024/12/05 4:55 p.m.31 views

CVE-2024-54128 Directus has an HTML Injection in Comment

Directus is a real-time API and App dashboard for managing SQL database content. The Comment feature has implemented a filter to prevent users from adding restricted characters, such as HTML tags. However, this filter operates on the client-side, which can be bypassed, making the application...

5.7CVSS0.00339EPSS
SaveExploits1References1
OSV
OSV
added 2024/12/05 4:55 p.m.8 views

CVE-2024-54128 Directus has an HTML Injection in Comment

Directus is a real-time API and App dashboard for managing SQL database content. The Comment feature has implemented a filter to prevent users from adding restricted characters, such as HTML tags. However, this filter operates on the client-side, which can be bypassed, making the application...

5.7CVSS7.3AI score
SaveExploits0References3
Rows per page
Query Builder