Lucene search
+L

1 matches found

OSV
OSV
added 2025/04/14 3:20 p.m.24 views

GHSA-VW58-PH65-6RXP Directus inserts access token from query string into logs

Summary Access token from query string is not redacted and is potentially exposed in system logs which may be persisted. Details The access token in req.query is not redacted when the LOGSTYLE is set to raw. If these logs are not properly sanitized or protected, an attacker with access to it can...

4.2CVSS6.8AI score0.00311EPSS
SaveExploits1References4
Rows per page
Query Builder