1 matches found
Directus is vulnerable to sensitive data exposure as user data is not being redacted when logged
Summary When using Directus Flows to handle CRUD events for users it is possible to log the incoming data to console using the "Log to Console" operation and a template string. Impact Malicious admins can log sensitive data from other users when they are created or updated. Workarounds Avoid...
4.2CVSS6.3AI score0.0017EPSS
SaveExploits0References6Affected Software1
20