Lucene search
+L

3 matches found

Cvelist
Cvelist
added 2025/11/13 9:29 p.m.19 views

CVE-2025-64748 Directus's conceal fields are searchable if read permissions enabled

Directus is a real-time API and App dashboard for managing SQL database content. A vulnerability in versions prior to 11.13.0 allows authenticated users to search concealed/sensitive fields when they have read permissions. While actual values remain masked , successful matches can be detected...

6.5CVSS0.00276EPSS
SaveExploits0References2
Rows per page
Query Builder