Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/07/15 3:18 p.m.11 views

Directus is vulnerable to sensitive data exposure as user data is not being redacted when logged

Summary When using Directus Flows to handle CRUD events for users it is possible to log the incoming data to console using the "Log to Console" operation and a template string. Impact Malicious admins can log sensitive data from other users when they are created or updated. Workarounds Avoid...

4.2CVSS6.3AI score0.0017EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder