1 matches found
GHSA-VW58-PH65-6RXP Directus inserts access token from query string into logs
Summary Access token from query string is not redacted and is potentially exposed in system logs which may be persisted. Details The access token in req.query is not redacted when the LOGSTYLE is set to raw. If these logs are not properly sanitized or protected, an attacker with access to it can...
4.2CVSS6.8AI score0.00311EPSS
SaveExploits1References4
20