Read the docs
TI-2022-07249 Aliases CVE-2022-23080GHSA-5h75-pvq4-82c9

directus - SSRF which leads to internal port scan

Priority LOW 24CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub. Impact type from CWE-918 and the CVSS impact.

Summary

In directus versions v9.0.0-beta.2 through 9.6.0 are vulnerable to server-side request forgery (SSRF) in the media upload functionality which allows a low privileged user to perform internal network port scans.

Why it matters now

EPSS 0.00826 57th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed directus (npm): 9.7.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
directusdirectusv9.0.0-beta.10 and later; up to v9.6.0—No fix listedCNA
—directus (npm)9.0.0-beta.2 to before 9.7.09.7.0Patch availableGHSA-5h75-pvq4-82c9
  • directus Vendordirectus Affected v9.0.0-beta.10 and later; up to v9.6.0 Fixed in — No fix listed CNA
  • directus (npm) Vendor— Affected 9.0.0-beta.2 to before 9.7.0 Fixed in 9.7.0 Patch available GHSA-5h75-pvq4-82c9

CPE configurations NVD · 114

CPEVersionsRoleVendor
cpe:2.3:a:rangerstudio:directus:*:*:*:*:*:*:*:*9.0.1 – 9.6.0VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:beta10:*:*:*:*:*:*9.0.0 beta10VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:beta11:*:*:*:*:*:*9.0.0 beta11VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:beta12:*:*:*:*:*:*9.0.0 beta12VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:beta13:*:*:*:*:*:*9.0.0 beta13VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:beta14:*:*:*:*:*:*9.0.0 beta14VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:beta2:*:*:*:*:*:*9.0.0 beta2VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:beta3:*:*:*:*:*:*9.0.0 beta3VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:beta4:*:*:*:*:*:*9.0.0 beta4VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:beta5:*:*:*:*:*:*9.0.0 beta5VulnerableRangerstudio
  • cpe:2.3:a:rangerstudio:directus:*:*:*:*:*:*:*:* Versions 9.0.1 – 9.6.0 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:beta10:*:*:*:*:*:* Versions 9.0.0 beta10 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:beta11:*:*:*:*:*:* Versions 9.0.0 beta11 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:beta12:*:*:*:*:*:* Versions 9.0.0 beta12 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:beta13:*:*:*:*:*:* Versions 9.0.0 beta13 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:beta14:*:*:*:*:*:* Versions 9.0.0 beta14 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:beta2:*:*:*:*:*:* Versions 9.0.0 beta2 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:beta3:*:*:*:*:*:* Versions 9.0.0 beta3 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:beta4:*:*:*:*:*:* Versions 9.0.0 beta4 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:beta5:*:*:*:*:*:* Versions 9.0.0 beta5 Vulnerable ·Rangerstudio
Show 104 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:rangerstudio:directus:9.0.0:beta7:*:*:*:*:*:*9.0.0 beta7VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:beta8:*:*:*:*:*:*9.0.0 beta8VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:beta9:*:*:*:*:*:*9.0.0 beta9VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc0:*:*:*:*:*:*9.0.0 rc0VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc1:*:*:*:*:*:*9.0.0 rc1VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc10:*:*:*:*:*:*9.0.0 rc10VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc100:*:*:*:*:*:*9.0.0 rc100VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc101:*:*:*:*:*:*9.0.0 rc101VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc11:*:*:*:*:*:*9.0.0 rc11VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc12:*:*:*:*:*:*9.0.0 rc12VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc13:*:*:*:*:*:*9.0.0 rc13VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc14:*:*:*:*:*:*9.0.0 rc14VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc15:*:*:*:*:*:*9.0.0 rc15VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc17:*:*:*:*:*:*9.0.0 rc17VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc18:*:*:*:*:*:*9.0.0 rc18VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc19:*:*:*:*:*:*9.0.0 rc19VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc2:*:*:*:*:*:*9.0.0 rc2VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc20:*:*:*:*:*:*9.0.0 rc20VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc21:*:*:*:*:*:*9.0.0 rc21VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc22:*:*:*:*:*:*9.0.0 rc22VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc23:*:*:*:*:*:*9.0.0 rc23VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc24:*:*:*:*:*:*9.0.0 rc24VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc25:*:*:*:*:*:*9.0.0 rc25VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc26:*:*:*:*:*:*9.0.0 rc26VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc27:*:*:*:*:*:*9.0.0 rc27VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc28:*:*:*:*:*:*9.0.0 rc28VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc29:*:*:*:*:*:*9.0.0 rc29VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc3:*:*:*:*:*:*9.0.0 rc3VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc30:*:*:*:*:*:*9.0.0 rc30VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc31:*:*:*:*:*:*9.0.0 rc31VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc32:*:*:*:*:*:*9.0.0 rc32VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc33:*:*:*:*:*:*9.0.0 rc33VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc34:*:*:*:*:*:*9.0.0 rc34VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc35:*:*:*:*:*:*9.0.0 rc35VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc36:*:*:*:*:*:*9.0.0 rc36VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc37:*:*:*:*:*:*9.0.0 rc37VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc38:*:*:*:*:*:*9.0.0 rc38VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc39:*:*:*:*:*:*9.0.0 rc39VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc4:*:*:*:*:*:*9.0.0 rc4VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc40:*:*:*:*:*:*9.0.0 rc40VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc41:*:*:*:*:*:*9.0.0 rc41VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc42:*:*:*:*:*:*9.0.0 rc42VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc43:*:*:*:*:*:*9.0.0 rc43VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc44:*:*:*:*:*:*9.0.0 rc44VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc45:*:*:*:*:*:*9.0.0 rc45VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc46:*:*:*:*:*:*9.0.0 rc46VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc47:*:*:*:*:*:*9.0.0 rc47VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc48:*:*:*:*:*:*9.0.0 rc48VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc49:*:*:*:*:*:*9.0.0 rc49VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc5:*:*:*:*:*:*9.0.0 rc5VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc50:*:*:*:*:*:*9.0.0 rc50VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc51:*:*:*:*:*:*9.0.0 rc51VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc52:*:*:*:*:*:*9.0.0 rc52VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc53:*:*:*:*:*:*9.0.0 rc53VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc54:*:*:*:*:*:*9.0.0 rc54VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc55:*:*:*:*:*:*9.0.0 rc55VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc56:*:*:*:*:*:*9.0.0 rc56VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc57:*:*:*:*:*:*9.0.0 rc57VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc58:*:*:*:*:*:*9.0.0 rc58VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc59:*:*:*:*:*:*9.0.0 rc59VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc6:*:*:*:*:*:*9.0.0 rc6VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc60:*:*:*:*:*:*9.0.0 rc60VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc61:*:*:*:*:*:*9.0.0 rc61VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc62:*:*:*:*:*:*9.0.0 rc62VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc63:*:*:*:*:*:*9.0.0 rc63VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc64:*:*:*:*:*:*9.0.0 rc64VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc65:*:*:*:*:*:*9.0.0 rc65VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc66:*:*:*:*:*:*9.0.0 rc66VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc67:*:*:*:*:*:*9.0.0 rc67VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc68:*:*:*:*:*:*9.0.0 rc68VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc69:*:*:*:*:*:*9.0.0 rc69VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc7:*:*:*:*:*:*9.0.0 rc7VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc70:*:*:*:*:*:*9.0.0 rc70VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc71:*:*:*:*:*:*9.0.0 rc71VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc72:*:*:*:*:*:*9.0.0 rc72VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc73:*:*:*:*:*:*9.0.0 rc73VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc74:*:*:*:*:*:*9.0.0 rc74VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc75:*:*:*:*:*:*9.0.0 rc75VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc76:*:*:*:*:*:*9.0.0 rc76VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc77:*:*:*:*:*:*9.0.0 rc77VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc78:*:*:*:*:*:*9.0.0 rc78VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc79:*:*:*:*:*:*9.0.0 rc79VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc8:*:*:*:*:*:*9.0.0 rc8VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc80:*:*:*:*:*:*9.0.0 rc80VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc81:*:*:*:*:*:*9.0.0 rc81VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc82:*:*:*:*:*:*9.0.0 rc82VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc83:*:*:*:*:*:*9.0.0 rc83VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc84:*:*:*:*:*:*9.0.0 rc84VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc85:*:*:*:*:*:*9.0.0 rc85VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc86:*:*:*:*:*:*9.0.0 rc86VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc87:*:*:*:*:*:*9.0.0 rc87VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc88:*:*:*:*:*:*9.0.0 rc88VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc89:*:*:*:*:*:*9.0.0 rc89VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc9:*:*:*:*:*:*9.0.0 rc9VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc90:*:*:*:*:*:*9.0.0 rc90VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc91:*:*:*:*:*:*9.0.0 rc91VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc92:*:*:*:*:*:*9.0.0 rc92VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc93:*:*:*:*:*:*9.0.0 rc93VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc94:*:*:*:*:*:*9.0.0 rc94VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc95:*:*:*:*:*:*9.0.0 rc95VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc96:*:*:*:*:*:*9.0.0 rc96VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc97:*:*:*:*:*:*9.0.0 rc97VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc98:*:*:*:*:*:*9.0.0 rc98VulnerableRangerstudio
cpe:2.3:a:rangerstudio:directus:9.0.0:rc99:*:*:*:*:*:*9.0.0 rc99VulnerableRangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:beta7:*:*:*:*:*:* Versions 9.0.0 beta7 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:beta8:*:*:*:*:*:* Versions 9.0.0 beta8 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:beta9:*:*:*:*:*:* Versions 9.0.0 beta9 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc0:*:*:*:*:*:* Versions 9.0.0 rc0 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc1:*:*:*:*:*:* Versions 9.0.0 rc1 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc10:*:*:*:*:*:* Versions 9.0.0 rc10 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc100:*:*:*:*:*:* Versions 9.0.0 rc100 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc101:*:*:*:*:*:* Versions 9.0.0 rc101 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc11:*:*:*:*:*:* Versions 9.0.0 rc11 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc12:*:*:*:*:*:* Versions 9.0.0 rc12 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc13:*:*:*:*:*:* Versions 9.0.0 rc13 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc14:*:*:*:*:*:* Versions 9.0.0 rc14 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc15:*:*:*:*:*:* Versions 9.0.0 rc15 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc17:*:*:*:*:*:* Versions 9.0.0 rc17 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc18:*:*:*:*:*:* Versions 9.0.0 rc18 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc19:*:*:*:*:*:* Versions 9.0.0 rc19 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc2:*:*:*:*:*:* Versions 9.0.0 rc2 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc20:*:*:*:*:*:* Versions 9.0.0 rc20 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc21:*:*:*:*:*:* Versions 9.0.0 rc21 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc22:*:*:*:*:*:* Versions 9.0.0 rc22 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc23:*:*:*:*:*:* Versions 9.0.0 rc23 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc24:*:*:*:*:*:* Versions 9.0.0 rc24 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc25:*:*:*:*:*:* Versions 9.0.0 rc25 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc26:*:*:*:*:*:* Versions 9.0.0 rc26 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc27:*:*:*:*:*:* Versions 9.0.0 rc27 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc28:*:*:*:*:*:* Versions 9.0.0 rc28 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc29:*:*:*:*:*:* Versions 9.0.0 rc29 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc3:*:*:*:*:*:* Versions 9.0.0 rc3 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc30:*:*:*:*:*:* Versions 9.0.0 rc30 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc31:*:*:*:*:*:* Versions 9.0.0 rc31 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc32:*:*:*:*:*:* Versions 9.0.0 rc32 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc33:*:*:*:*:*:* Versions 9.0.0 rc33 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc34:*:*:*:*:*:* Versions 9.0.0 rc34 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc35:*:*:*:*:*:* Versions 9.0.0 rc35 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc36:*:*:*:*:*:* Versions 9.0.0 rc36 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc37:*:*:*:*:*:* Versions 9.0.0 rc37 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc38:*:*:*:*:*:* Versions 9.0.0 rc38 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc39:*:*:*:*:*:* Versions 9.0.0 rc39 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc4:*:*:*:*:*:* Versions 9.0.0 rc4 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc40:*:*:*:*:*:* Versions 9.0.0 rc40 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc41:*:*:*:*:*:* Versions 9.0.0 rc41 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc42:*:*:*:*:*:* Versions 9.0.0 rc42 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc43:*:*:*:*:*:* Versions 9.0.0 rc43 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc44:*:*:*:*:*:* Versions 9.0.0 rc44 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc45:*:*:*:*:*:* Versions 9.0.0 rc45 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc46:*:*:*:*:*:* Versions 9.0.0 rc46 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc47:*:*:*:*:*:* Versions 9.0.0 rc47 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc48:*:*:*:*:*:* Versions 9.0.0 rc48 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc49:*:*:*:*:*:* Versions 9.0.0 rc49 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc5:*:*:*:*:*:* Versions 9.0.0 rc5 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc50:*:*:*:*:*:* Versions 9.0.0 rc50 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc51:*:*:*:*:*:* Versions 9.0.0 rc51 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc52:*:*:*:*:*:* Versions 9.0.0 rc52 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc53:*:*:*:*:*:* Versions 9.0.0 rc53 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc54:*:*:*:*:*:* Versions 9.0.0 rc54 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc55:*:*:*:*:*:* Versions 9.0.0 rc55 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc56:*:*:*:*:*:* Versions 9.0.0 rc56 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc57:*:*:*:*:*:* Versions 9.0.0 rc57 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc58:*:*:*:*:*:* Versions 9.0.0 rc58 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc59:*:*:*:*:*:* Versions 9.0.0 rc59 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc6:*:*:*:*:*:* Versions 9.0.0 rc6 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc60:*:*:*:*:*:* Versions 9.0.0 rc60 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc61:*:*:*:*:*:* Versions 9.0.0 rc61 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc62:*:*:*:*:*:* Versions 9.0.0 rc62 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc63:*:*:*:*:*:* Versions 9.0.0 rc63 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc64:*:*:*:*:*:* Versions 9.0.0 rc64 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc65:*:*:*:*:*:* Versions 9.0.0 rc65 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc66:*:*:*:*:*:* Versions 9.0.0 rc66 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc67:*:*:*:*:*:* Versions 9.0.0 rc67 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc68:*:*:*:*:*:* Versions 9.0.0 rc68 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc69:*:*:*:*:*:* Versions 9.0.0 rc69 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc7:*:*:*:*:*:* Versions 9.0.0 rc7 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc70:*:*:*:*:*:* Versions 9.0.0 rc70 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc71:*:*:*:*:*:* Versions 9.0.0 rc71 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc72:*:*:*:*:*:* Versions 9.0.0 rc72 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc73:*:*:*:*:*:* Versions 9.0.0 rc73 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc74:*:*:*:*:*:* Versions 9.0.0 rc74 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc75:*:*:*:*:*:* Versions 9.0.0 rc75 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc76:*:*:*:*:*:* Versions 9.0.0 rc76 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc77:*:*:*:*:*:* Versions 9.0.0 rc77 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc78:*:*:*:*:*:* Versions 9.0.0 rc78 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc79:*:*:*:*:*:* Versions 9.0.0 rc79 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc8:*:*:*:*:*:* Versions 9.0.0 rc8 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc80:*:*:*:*:*:* Versions 9.0.0 rc80 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc81:*:*:*:*:*:* Versions 9.0.0 rc81 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc82:*:*:*:*:*:* Versions 9.0.0 rc82 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc83:*:*:*:*:*:* Versions 9.0.0 rc83 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc84:*:*:*:*:*:* Versions 9.0.0 rc84 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc85:*:*:*:*:*:* Versions 9.0.0 rc85 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc86:*:*:*:*:*:* Versions 9.0.0 rc86 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc87:*:*:*:*:*:* Versions 9.0.0 rc87 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc88:*:*:*:*:*:* Versions 9.0.0 rc88 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc89:*:*:*:*:*:* Versions 9.0.0 rc89 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc9:*:*:*:*:*:* Versions 9.0.0 rc9 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc90:*:*:*:*:*:* Versions 9.0.0 rc90 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc91:*:*:*:*:*:* Versions 9.0.0 rc91 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc92:*:*:*:*:*:* Versions 9.0.0 rc92 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc93:*:*:*:*:*:* Versions 9.0.0 rc93 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc94:*:*:*:*:*:* Versions 9.0.0 rc94 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc95:*:*:*:*:*:* Versions 9.0.0 rc95 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc96:*:*:*:*:*:* Versions 9.0.0 rc96 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc97:*:*:*:*:*:* Versions 9.0.0 rc97 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc98:*:*:*:*:*:* Versions 9.0.0 rc98 Vulnerable ·Rangerstudio
  • cpe:2.3:a:rangerstudio:directus:9.0.0:rc99:*:*:*:*:*:* Versions 9.0.0 rc99 Vulnerable ·Rangerstudio

Remediation

  • Fix · GHSA-5h75-pvq4-82c9 directus (npm) Fixed in 9.7.0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-23080
  2. 2026-10-03 Alias added: GHSA-5h75-pvq4-82c9

References

Exploit 1

Patch 1

Advisory 1

Other 1

  • TI-2025-21659 Directus's webhook trigger flows can leak sensitive data CVSS 3.1HIGH 8.6
  • TI-2024-36266 Directus allows unauthenticated access to WebSocket events and operations CVSS 3.1HIGH 7.5
  • TI-2024-26791 Directus allows SSO User Enumeration CVSS 3.1HIGH 7.5
  • TI-2024-23956 Directus is soft-locked by providing a string value to random string util CVSS 3.1HIGH 7.5
  • TI-2024-26624 Directus Incorrectly handles _in` filter CVSS 3.1HIGH 7.7
  • TI-2025-21658 Directus `search` query parameter allows enumeration of non permitted fields CVSS 3.1MEDIUM 5.3
See all 61 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences