Directus vulnerabilities

2 known vulnerabilities in Directus from Monospace. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  directus: Improper Access Control

  CVE-2024-39701Jul 8, 2024Directus

  Directus is a real-time API and App dashboard for managing SQL database content. Directus >=9.23.0, <=v10.5.3 improperly handles _in, _nin operators. It evaluates empty arrays as valid so expressions like {"role": {"_in": $CURRENT_USER.some_field}} would evalu

• 7.5 High severity

  directus: Improper Check for Unusual or Exceptional Conditions

  CVE-2024-36128Jun 3, 2024Directus

  Directus is a real-time API and App dashboard for managing SQL database content. Prior to 10.11.2, providing a non-numeric length value to the random string generation utility will create a memory issue breaking the capability to generate random strings platfo