Read the docs
TI-2025-21658 Aliases CVE-2025-30352GHSA-7wq3-jr35-275c

Directus `search` query parameter allows enumeration of non permitted fields

Priority MEDIUM 63CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and GitHub. Impact type from CWE-200.

Summary

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0-alpha.4 and prior to version 11.5.0, the `search` query parameter allows users with access to a collection to filter items based on fields they do not have permission to view. This allows the enumeration of unknown field contents. The searchable columns (numbers & strings) are not checked against permissions when injecting the `where` clauses for applying the search query. This leads to the possibility of enumerating those un-permitted fields. Version 11.5.0 fixes the issue.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00376 31st percentileScored 2026-11-07
Fix Fixed directus (directus): 11.5.0directus (npm): 11.5.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
directusdirectus9.0.0-alpha.4 to before 11.5.011.5.0Patch availableCNA
—directus (npm)9.0.0-alpha.4 to before 11.5.011.5.0Patch availableGHSA-7wq3-jr35-275c
  • directus Vendordirectus Affected 9.0.0-alpha.4 to before 11.5.0 Fixed in 11.5.0 Patch available CNA
  • directus (npm) Vendor— Affected 9.0.0-alpha.4 to before 11.5.0 Fixed in 11.5.0 Patch available GHSA-7wq3-jr35-275c

CPE configurations NVD · 152

CPEVersionsRoleVendor
cpe:2.3:a:monospace:directus:*:*:*:*:*:node.js:*:*9.0.1 to before 11.5.0Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha10:*:*:*:node.js:*:*9.0.0 alpha10Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha11:*:*:*:node.js:*:*9.0.0 alpha11Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha12:*:*:*:node.js:*:*9.0.0 alpha12Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha13:*:*:*:node.js:*:*9.0.0 alpha13Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha14:*:*:*:node.js:*:*9.0.0 alpha14Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha15:*:*:*:node.js:*:*9.0.0 alpha15Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha16:*:*:*:node.js:*:*9.0.0 alpha16Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha17:*:*:*:node.js:*:*9.0.0 alpha17Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha18:*:*:*:node.js:*:*9.0.0 alpha18Vulnerabledirectus
  • cpe:2.3:a:monospace:directus:*:*:*:*:*:node.js:*:* Versions 9.0.1 to before 11.5.0 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha10:*:*:*:node.js:*:* Versions 9.0.0 alpha10 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha11:*:*:*:node.js:*:* Versions 9.0.0 alpha11 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha12:*:*:*:node.js:*:* Versions 9.0.0 alpha12 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha13:*:*:*:node.js:*:* Versions 9.0.0 alpha13 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha14:*:*:*:node.js:*:* Versions 9.0.0 alpha14 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha15:*:*:*:node.js:*:* Versions 9.0.0 alpha15 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha16:*:*:*:node.js:*:* Versions 9.0.0 alpha16 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha17:*:*:*:node.js:*:* Versions 9.0.0 alpha17 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha18:*:*:*:node.js:*:* Versions 9.0.0 alpha18 Vulnerable ·directus
Show 142 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:monospace:directus:9.0.0:alpha19:*:*:*:node.js:*:*9.0.0 alpha19Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha20:*:*:*:node.js:*:*9.0.0 alpha20Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha21:*:*:*:node.js:*:*9.0.0 alpha21Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha22:*:*:*:node.js:*:*9.0.0 alpha22Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha23:*:*:*:node.js:*:*9.0.0 alpha23Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha24:*:*:*:node.js:*:*9.0.0 alpha24Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha25:*:*:*:node.js:*:*9.0.0 alpha25Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha26:*:*:*:node.js:*:*9.0.0 alpha26Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha27:*:*:*:node.js:*:*9.0.0 alpha27Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha31:*:*:*:node.js:*:*9.0.0 alpha31Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha32:*:*:*:node.js:*:*9.0.0 alpha32Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha33:*:*:*:node.js:*:*9.0.0 alpha33Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha34:*:*:*:node.js:*:*9.0.0 alpha34Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha35:*:*:*:node.js:*:*9.0.0 alpha35Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha36:*:*:*:node.js:*:*9.0.0 alpha36Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha37:*:*:*:node.js:*:*9.0.0 alpha37Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha38:*:*:*:node.js:*:*9.0.0 alpha38Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha39:*:*:*:node.js:*:*9.0.0 alpha39Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha4:*:*:*:node.js:*:*9.0.0 alpha4Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha40:*:*:*:node.js:*:*9.0.0 alpha40Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha41:*:*:*:node.js:*:*9.0.0 alpha41Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha42:*:*:*:node.js:*:*9.0.0 alpha42Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha5:*:*:*:node.js:*:*9.0.0 alpha5Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha6:*:*:*:node.js:*:*9.0.0 alpha6Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha7:*:*:*:node.js:*:*9.0.0 alpha7Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha8:*:*:*:node.js:*:*9.0.0 alpha8Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:alpha9:*:*:*:node.js:*:*9.0.0 alpha9Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:beta0:*:*:*:node.js:*:*9.0.0 beta0Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:beta1:*:*:*:node.js:*:*9.0.0 beta1Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:beta10:*:*:*:node.js:*:*9.0.0 beta10Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:beta11:*:*:*:node.js:*:*9.0.0 beta11Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:beta12:*:*:*:node.js:*:*9.0.0 beta12Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:beta13:*:*:*:node.js:*:*9.0.0 beta13Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:beta14:*:*:*:node.js:*:*9.0.0 beta14Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:beta2:*:*:*:node.js:*:*9.0.0 beta2Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:beta3:*:*:*:node.js:*:*9.0.0 beta3Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:beta4:*:*:*:node.js:*:*9.0.0 beta4Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:beta5:*:*:*:node.js:*:*9.0.0 beta5Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:beta7:*:*:*:node.js:*:*9.0.0 beta7Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:beta8:*:*:*:node.js:*:*9.0.0 beta8Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:beta9:*:*:*:node.js:*:*9.0.0 beta9Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc0:*:*:*:node.js:*:*9.0.0 rc0Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc1:*:*:*:node.js:*:*9.0.0 rc1Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc10:*:*:*:node.js:*:*9.0.0 rc10Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc100:*:*:*:node.js:*:*9.0.0 rc100Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc101:*:*:*:node.js:*:*9.0.0 rc101Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc11:*:*:*:node.js:*:*9.0.0 rc11Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc12:*:*:*:node.js:*:*9.0.0 rc12Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc13:*:*:*:node.js:*:*9.0.0 rc13Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc14:*:*:*:node.js:*:*9.0.0 rc14Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc15:*:*:*:node.js:*:*9.0.0 rc15Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc17:*:*:*:node.js:*:*9.0.0 rc17Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc18:*:*:*:node.js:*:*9.0.0 rc18Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc19:*:*:*:node.js:*:*9.0.0 rc19Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc2:*:*:*:node.js:*:*9.0.0 rc2Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc20:*:*:*:node.js:*:*9.0.0 rc20Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc21:*:*:*:node.js:*:*9.0.0 rc21Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc22:*:*:*:node.js:*:*9.0.0 rc22Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc23:*:*:*:node.js:*:*9.0.0 rc23Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc24:*:*:*:node.js:*:*9.0.0 rc24Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc25:*:*:*:node.js:*:*9.0.0 rc25Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc26:*:*:*:node.js:*:*9.0.0 rc26Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc27:*:*:*:node.js:*:*9.0.0 rc27Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc28:*:*:*:node.js:*:*9.0.0 rc28Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc29:*:*:*:node.js:*:*9.0.0 rc29Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc3:*:*:*:node.js:*:*9.0.0 rc3Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc30:*:*:*:node.js:*:*9.0.0 rc30Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc31:*:*:*:node.js:*:*9.0.0 rc31Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc32:*:*:*:node.js:*:*9.0.0 rc32Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc33:*:*:*:node.js:*:*9.0.0 rc33Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc34:*:*:*:node.js:*:*9.0.0 rc34Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc35:*:*:*:node.js:*:*9.0.0 rc35Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc36:*:*:*:node.js:*:*9.0.0 rc36Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc37:*:*:*:node.js:*:*9.0.0 rc37Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc38:*:*:*:node.js:*:*9.0.0 rc38Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc39:*:*:*:node.js:*:*9.0.0 rc39Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc4:*:*:*:node.js:*:*9.0.0 rc4Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc40:*:*:*:node.js:*:*9.0.0 rc40Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc41:*:*:*:node.js:*:*9.0.0 rc41Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc42:*:*:*:node.js:*:*9.0.0 rc42Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc43:*:*:*:node.js:*:*9.0.0 rc43Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc44:*:*:*:node.js:*:*9.0.0 rc44Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc45:*:*:*:node.js:*:*9.0.0 rc45Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc46:*:*:*:node.js:*:*9.0.0 rc46Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc47:*:*:*:node.js:*:*9.0.0 rc47Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc48:*:*:*:node.js:*:*9.0.0 rc48Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc49:*:*:*:node.js:*:*9.0.0 rc49Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc5:*:*:*:node.js:*:*9.0.0 rc5Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc50:*:*:*:node.js:*:*9.0.0 rc50Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc51:*:*:*:node.js:*:*9.0.0 rc51Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc52:*:*:*:node.js:*:*9.0.0 rc52Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc53:*:*:*:node.js:*:*9.0.0 rc53Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc54:*:*:*:node.js:*:*9.0.0 rc54Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc55:*:*:*:node.js:*:*9.0.0 rc55Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc56:*:*:*:node.js:*:*9.0.0 rc56Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc57:*:*:*:node.js:*:*9.0.0 rc57Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc58:*:*:*:node.js:*:*9.0.0 rc58Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc59:*:*:*:node.js:*:*9.0.0 rc59Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc6:*:*:*:node.js:*:*9.0.0 rc6Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc60:*:*:*:node.js:*:*9.0.0 rc60Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc61:*:*:*:node.js:*:*9.0.0 rc61Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc62:*:*:*:node.js:*:*9.0.0 rc62Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc63:*:*:*:node.js:*:*9.0.0 rc63Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc64:*:*:*:node.js:*:*9.0.0 rc64Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc65:*:*:*:node.js:*:*9.0.0 rc65Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc66:*:*:*:node.js:*:*9.0.0 rc66Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc67:*:*:*:node.js:*:*9.0.0 rc67Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc68:*:*:*:node.js:*:*9.0.0 rc68Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc69:*:*:*:node.js:*:*9.0.0 rc69Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc7:*:*:*:node.js:*:*9.0.0 rc7Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc70:*:*:*:node.js:*:*9.0.0 rc70Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc71:*:*:*:node.js:*:*9.0.0 rc71Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc72:*:*:*:node.js:*:*9.0.0 rc72Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc73:*:*:*:node.js:*:*9.0.0 rc73Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc74:*:*:*:node.js:*:*9.0.0 rc74Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc75:*:*:*:node.js:*:*9.0.0 rc75Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc76:*:*:*:node.js:*:*9.0.0 rc76Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc77:*:*:*:node.js:*:*9.0.0 rc77Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc78:*:*:*:node.js:*:*9.0.0 rc78Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc79:*:*:*:node.js:*:*9.0.0 rc79Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc8:*:*:*:node.js:*:*9.0.0 rc8Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc80:*:*:*:node.js:*:*9.0.0 rc80Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc81:*:*:*:node.js:*:*9.0.0 rc81Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc82:*:*:*:node.js:*:*9.0.0 rc82Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc83:*:*:*:node.js:*:*9.0.0 rc83Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc84:*:*:*:node.js:*:*9.0.0 rc84Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc85:*:*:*:node.js:*:*9.0.0 rc85Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc86:*:*:*:node.js:*:*9.0.0 rc86Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc87:*:*:*:node.js:*:*9.0.0 rc87Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc88:*:*:*:node.js:*:*9.0.0 rc88Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc89:*:*:*:node.js:*:*9.0.0 rc89Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc9:*:*:*:node.js:*:*9.0.0 rc9Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc90:*:*:*:node.js:*:*9.0.0 rc90Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc91:*:*:*:node.js:*:*9.0.0 rc91Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc92:*:*:*:node.js:*:*9.0.0 rc92Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc93:*:*:*:node.js:*:*9.0.0 rc93Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc94:*:*:*:node.js:*:*9.0.0 rc94Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc95:*:*:*:node.js:*:*9.0.0 rc95Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc96:*:*:*:node.js:*:*9.0.0 rc96Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc97:*:*:*:node.js:*:*9.0.0 rc97Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc98:*:*:*:node.js:*:*9.0.0 rc98Vulnerabledirectus
cpe:2.3:a:monospace:directus:9.0.0:rc99:*:*:*:node.js:*:*9.0.0 rc99Vulnerabledirectus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha19:*:*:*:node.js:*:* Versions 9.0.0 alpha19 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha20:*:*:*:node.js:*:* Versions 9.0.0 alpha20 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha21:*:*:*:node.js:*:* Versions 9.0.0 alpha21 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha22:*:*:*:node.js:*:* Versions 9.0.0 alpha22 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha23:*:*:*:node.js:*:* Versions 9.0.0 alpha23 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha24:*:*:*:node.js:*:* Versions 9.0.0 alpha24 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha25:*:*:*:node.js:*:* Versions 9.0.0 alpha25 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha26:*:*:*:node.js:*:* Versions 9.0.0 alpha26 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha27:*:*:*:node.js:*:* Versions 9.0.0 alpha27 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha31:*:*:*:node.js:*:* Versions 9.0.0 alpha31 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha32:*:*:*:node.js:*:* Versions 9.0.0 alpha32 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha33:*:*:*:node.js:*:* Versions 9.0.0 alpha33 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha34:*:*:*:node.js:*:* Versions 9.0.0 alpha34 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha35:*:*:*:node.js:*:* Versions 9.0.0 alpha35 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha36:*:*:*:node.js:*:* Versions 9.0.0 alpha36 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha37:*:*:*:node.js:*:* Versions 9.0.0 alpha37 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha38:*:*:*:node.js:*:* Versions 9.0.0 alpha38 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha39:*:*:*:node.js:*:* Versions 9.0.0 alpha39 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha4:*:*:*:node.js:*:* Versions 9.0.0 alpha4 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha40:*:*:*:node.js:*:* Versions 9.0.0 alpha40 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha41:*:*:*:node.js:*:* Versions 9.0.0 alpha41 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha42:*:*:*:node.js:*:* Versions 9.0.0 alpha42 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha5:*:*:*:node.js:*:* Versions 9.0.0 alpha5 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha6:*:*:*:node.js:*:* Versions 9.0.0 alpha6 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha7:*:*:*:node.js:*:* Versions 9.0.0 alpha7 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha8:*:*:*:node.js:*:* Versions 9.0.0 alpha8 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:alpha9:*:*:*:node.js:*:* Versions 9.0.0 alpha9 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:beta0:*:*:*:node.js:*:* Versions 9.0.0 beta0 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:beta1:*:*:*:node.js:*:* Versions 9.0.0 beta1 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:beta10:*:*:*:node.js:*:* Versions 9.0.0 beta10 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:beta11:*:*:*:node.js:*:* Versions 9.0.0 beta11 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:beta12:*:*:*:node.js:*:* Versions 9.0.0 beta12 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:beta13:*:*:*:node.js:*:* Versions 9.0.0 beta13 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:beta14:*:*:*:node.js:*:* Versions 9.0.0 beta14 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:beta2:*:*:*:node.js:*:* Versions 9.0.0 beta2 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:beta3:*:*:*:node.js:*:* Versions 9.0.0 beta3 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:beta4:*:*:*:node.js:*:* Versions 9.0.0 beta4 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:beta5:*:*:*:node.js:*:* Versions 9.0.0 beta5 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:beta7:*:*:*:node.js:*:* Versions 9.0.0 beta7 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:beta8:*:*:*:node.js:*:* Versions 9.0.0 beta8 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:beta9:*:*:*:node.js:*:* Versions 9.0.0 beta9 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc0:*:*:*:node.js:*:* Versions 9.0.0 rc0 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc1:*:*:*:node.js:*:* Versions 9.0.0 rc1 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc10:*:*:*:node.js:*:* Versions 9.0.0 rc10 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc100:*:*:*:node.js:*:* Versions 9.0.0 rc100 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc101:*:*:*:node.js:*:* Versions 9.0.0 rc101 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc11:*:*:*:node.js:*:* Versions 9.0.0 rc11 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc12:*:*:*:node.js:*:* Versions 9.0.0 rc12 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc13:*:*:*:node.js:*:* Versions 9.0.0 rc13 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc14:*:*:*:node.js:*:* Versions 9.0.0 rc14 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc15:*:*:*:node.js:*:* Versions 9.0.0 rc15 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc17:*:*:*:node.js:*:* Versions 9.0.0 rc17 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc18:*:*:*:node.js:*:* Versions 9.0.0 rc18 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc19:*:*:*:node.js:*:* Versions 9.0.0 rc19 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc2:*:*:*:node.js:*:* Versions 9.0.0 rc2 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc20:*:*:*:node.js:*:* Versions 9.0.0 rc20 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc21:*:*:*:node.js:*:* Versions 9.0.0 rc21 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc22:*:*:*:node.js:*:* Versions 9.0.0 rc22 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc23:*:*:*:node.js:*:* Versions 9.0.0 rc23 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc24:*:*:*:node.js:*:* Versions 9.0.0 rc24 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc25:*:*:*:node.js:*:* Versions 9.0.0 rc25 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc26:*:*:*:node.js:*:* Versions 9.0.0 rc26 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc27:*:*:*:node.js:*:* Versions 9.0.0 rc27 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc28:*:*:*:node.js:*:* Versions 9.0.0 rc28 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc29:*:*:*:node.js:*:* Versions 9.0.0 rc29 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc3:*:*:*:node.js:*:* Versions 9.0.0 rc3 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc30:*:*:*:node.js:*:* Versions 9.0.0 rc30 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc31:*:*:*:node.js:*:* Versions 9.0.0 rc31 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc32:*:*:*:node.js:*:* Versions 9.0.0 rc32 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc33:*:*:*:node.js:*:* Versions 9.0.0 rc33 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc34:*:*:*:node.js:*:* Versions 9.0.0 rc34 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc35:*:*:*:node.js:*:* Versions 9.0.0 rc35 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc36:*:*:*:node.js:*:* Versions 9.0.0 rc36 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc37:*:*:*:node.js:*:* Versions 9.0.0 rc37 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc38:*:*:*:node.js:*:* Versions 9.0.0 rc38 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc39:*:*:*:node.js:*:* Versions 9.0.0 rc39 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc4:*:*:*:node.js:*:* Versions 9.0.0 rc4 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc40:*:*:*:node.js:*:* Versions 9.0.0 rc40 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc41:*:*:*:node.js:*:* Versions 9.0.0 rc41 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc42:*:*:*:node.js:*:* Versions 9.0.0 rc42 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc43:*:*:*:node.js:*:* Versions 9.0.0 rc43 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc44:*:*:*:node.js:*:* Versions 9.0.0 rc44 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc45:*:*:*:node.js:*:* Versions 9.0.0 rc45 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc46:*:*:*:node.js:*:* Versions 9.0.0 rc46 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc47:*:*:*:node.js:*:* Versions 9.0.0 rc47 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc48:*:*:*:node.js:*:* Versions 9.0.0 rc48 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc49:*:*:*:node.js:*:* Versions 9.0.0 rc49 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc5:*:*:*:node.js:*:* Versions 9.0.0 rc5 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc50:*:*:*:node.js:*:* Versions 9.0.0 rc50 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc51:*:*:*:node.js:*:* Versions 9.0.0 rc51 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc52:*:*:*:node.js:*:* Versions 9.0.0 rc52 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc53:*:*:*:node.js:*:* Versions 9.0.0 rc53 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc54:*:*:*:node.js:*:* Versions 9.0.0 rc54 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc55:*:*:*:node.js:*:* Versions 9.0.0 rc55 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc56:*:*:*:node.js:*:* Versions 9.0.0 rc56 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc57:*:*:*:node.js:*:* Versions 9.0.0 rc57 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc58:*:*:*:node.js:*:* Versions 9.0.0 rc58 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc59:*:*:*:node.js:*:* Versions 9.0.0 rc59 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc6:*:*:*:node.js:*:* Versions 9.0.0 rc6 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc60:*:*:*:node.js:*:* Versions 9.0.0 rc60 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc61:*:*:*:node.js:*:* Versions 9.0.0 rc61 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc62:*:*:*:node.js:*:* Versions 9.0.0 rc62 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc63:*:*:*:node.js:*:* Versions 9.0.0 rc63 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc64:*:*:*:node.js:*:* Versions 9.0.0 rc64 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc65:*:*:*:node.js:*:* Versions 9.0.0 rc65 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc66:*:*:*:node.js:*:* Versions 9.0.0 rc66 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc67:*:*:*:node.js:*:* Versions 9.0.0 rc67 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc68:*:*:*:node.js:*:* Versions 9.0.0 rc68 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc69:*:*:*:node.js:*:* Versions 9.0.0 rc69 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc7:*:*:*:node.js:*:* Versions 9.0.0 rc7 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc70:*:*:*:node.js:*:* Versions 9.0.0 rc70 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc71:*:*:*:node.js:*:* Versions 9.0.0 rc71 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc72:*:*:*:node.js:*:* Versions 9.0.0 rc72 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc73:*:*:*:node.js:*:* Versions 9.0.0 rc73 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc74:*:*:*:node.js:*:* Versions 9.0.0 rc74 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc75:*:*:*:node.js:*:* Versions 9.0.0 rc75 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc76:*:*:*:node.js:*:* Versions 9.0.0 rc76 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc77:*:*:*:node.js:*:* Versions 9.0.0 rc77 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc78:*:*:*:node.js:*:* Versions 9.0.0 rc78 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc79:*:*:*:node.js:*:* Versions 9.0.0 rc79 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc8:*:*:*:node.js:*:* Versions 9.0.0 rc8 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc80:*:*:*:node.js:*:* Versions 9.0.0 rc80 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc81:*:*:*:node.js:*:* Versions 9.0.0 rc81 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc82:*:*:*:node.js:*:* Versions 9.0.0 rc82 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc83:*:*:*:node.js:*:* Versions 9.0.0 rc83 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc84:*:*:*:node.js:*:* Versions 9.0.0 rc84 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc85:*:*:*:node.js:*:* Versions 9.0.0 rc85 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc86:*:*:*:node.js:*:* Versions 9.0.0 rc86 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc87:*:*:*:node.js:*:* Versions 9.0.0 rc87 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc88:*:*:*:node.js:*:* Versions 9.0.0 rc88 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc89:*:*:*:node.js:*:* Versions 9.0.0 rc89 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc9:*:*:*:node.js:*:* Versions 9.0.0 rc9 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc90:*:*:*:node.js:*:* Versions 9.0.0 rc90 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc91:*:*:*:node.js:*:* Versions 9.0.0 rc91 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc92:*:*:*:node.js:*:* Versions 9.0.0 rc92 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc93:*:*:*:node.js:*:* Versions 9.0.0 rc93 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc94:*:*:*:node.js:*:* Versions 9.0.0 rc94 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc95:*:*:*:node.js:*:* Versions 9.0.0 rc95 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc96:*:*:*:node.js:*:* Versions 9.0.0 rc96 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc97:*:*:*:node.js:*:* Versions 9.0.0 rc97 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc98:*:*:*:node.js:*:* Versions 9.0.0 rc98 Vulnerable ·directus
  • cpe:2.3:a:monospace:directus:9.0.0:rc99:*:*:*:node.js:*:* Versions 9.0.0 rc99 Vulnerable ·directus

Remediation

  • Fix · CNA directus (directus) Fixed in 11.5.0
  • Fix · GHSA-7wq3-jr35-275c directus (npm) Fixed in 11.5.0 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-30352
  2. 2026-10-03 Alias added: GHSA-7wq3-jr35-275c

References

Patch 1

Advisory 2

Other 1

  • TI-2025-21659 Directus's webhook trigger flows can leak sensitive data CVSS 3.1HIGH 8.6
  • TI-2024-36266 Directus allows unauthenticated access to WebSocket events and operations CVSS 3.1HIGH 7.5
  • TI-2024-26791 Directus allows SSO User Enumeration CVSS 3.1HIGH 7.5
  • TI-2024-23956 Directus is soft-locked by providing a string value to random string util CVSS 3.1HIGH 7.5
  • TI-2024-26624 Directus Incorrectly handles _in` filter CVSS 3.1HIGH 7.7
  • TI-2024-26790 Directus GraphQL Field Duplication Denial of Service (DoS) CVSS 3.1MEDIUM 6.5
See all 55 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences