CyberSecBulletin

Monospace vulnerabilities

We track 2 vulnerabilities in Monospace products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 8, 2024.

2vulnerabilities
0critical
2high
0exploited
7.6average CVSS score

Latest Monospace vulnerabilities

  • 7.7 High severity

    directus: Improper Access Control

    CVE-2024-39701Directus

    Directus is a real-time API and App dashboard for managing SQL database content. Directus >=9.23.0, <=v10.5.3 improperly handles _in, _nin operators. It evaluates empty arrays as valid so expressions like {"role": {"_in": $CURRENT_USER.some_field}} would evalu

  • 7.5 High severity

    directus: Improper Check for Unusual or Exceptional Conditions

    CVE-2024-36128Directus

    Directus is a real-time API and App dashboard for managing SQL database content. Prior to 10.11.2, providing a non-numeric length value to the random string generation utility will create a memory issue breaking the capability to generate random strings platfo