Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2024/09/18 5:42 p.m.29 views

Directus vulnerable to SSRF Loopback IP filter bypass

Impact If you're relying on blocking access to localhost using the default 0.0.0.0 filter this can be bypassed using other registered loopback devices like 127.0.0.2 - 127.127.127.127 Workaround You can block this bypass by manually adding the 127.0.0.0/8 CIDR range which will block access to any...

5CVSS7AI score0.00463EPSS
SaveExploits0References7Affected Software2
Rows per page
Query Builder