Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2022/08/30 8:18 p.m.47 views

Directus vulnerable to unhandled exception on illegal filename_disk value

The Directus process can be aborted by having an authorized user update the filenamedisk value to a folder and accessing that file through the /assets endpoint. The vulnerability is patched and released in v9.15.0. You can prevent this problem by making sure no untrusted non-admin users have...

6.5CVSS6.3AI score0.00854EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder