directus vulnerabilities

Directus is a real-time API and App dashboard for managing SQL database content

11.11.0

5 years ago

13 days ago

Known vulnerabilities in the directus package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Improper Privilege Management	<11.2.0
M Cross-site Scripting (XSS)	<11.3.3
M Authorization Bypass Through User-Controlled Key	<10.13.2
M Authorization Bypass Through User-Controlled Key	<10.13.2
M Cross-site Scripting (XSS)	<11.3.3
M Improper Access Control	>=10.0.0 <10.6.0
H Information Exposure	>=10.0.0 <10.13.0
L Server-Side Request Forgery (SSRF)	<10.9.3
H Resource Exhaustion	<10.12.0
H Improper Check for Unusual or Exceptional Conditions	<10.11.2
M Information Exposure	<10.11.0
M Insufficient Session Expiration	>=10.10.0 <10.11.0
M URL Redirection to Untrusted Site ('Open Redirect')	<10.10.0
L Information Exposure Through Sent Data	<10.10.0
M Always-Incorrect Control Flow Implementation	<10.8.3
M Exposure of Sensitive Information Through Metadata	<10.8.3
H Improper Handling of Exceptional Conditions	>=10.4.1 <10.6.2
M Information Exposure	>=10.3.0 <10.5.0
M Insertion of Sensitive Information into Log File	>=9.23.1 <9.23.3
M Information Exposure	<9.16.0
H Cross-site Scripting (XSS)	<9.23.1
M Server-Side Request Forgery	<9.23.1
M Access Restriction Bypass	<9.15.0
M Server-side Request Forgery (SSRF)	>=9.0.0-beta.2 <9.7.0
H Insecure Defaults	<9.7.0
M Cross-site Scripting (XSS)	<9.7.0
M Cross-site Scripting (XSS)	>=9.0.0-alpha.5 <9.4.2
M Cross-site Scripting (XSS)	>=9.0.0-alpha.5 <9.4.2

311 VERSIONS IN TOTAL See all versions