1 matches found
Unauthorized Access
directus is vulnerable to Unauthorized Access. The vulnerability is due to improper authentication handling when WEBSOCKETSGRAPHQLAUTH or WEBSOCKETSRESTAUTH is set to "public," allowing unauthenticated users to perform CRUD operations and subscribe to changes with full admin privileges...
7.5CVSS7.4AI score0.00588EPSS
SaveExploits1References4Affected Software2
20