directus

Directus' insufficient permission checks can enable unauthenticated users to manually trigger Flows

Server-Side Request Forgery in Directus

directus vulnerable to Insertion of Sensitive Information into Log File

Directus version number disclosure

Directus: Authenticated Users Can Extract Concealed Fields via Aggregate Queries

Directus: Sensitive fields exposed in revision history

Directus allows redacted data extraction on the API through "alias"

Directus API vulnerable to denial of service

directus vulnerable to HTML Injection in Password Reset email to custom Reset URL

Directus: Open Redirect via Parser Bypass in OAuth2/SAML Authentication Flow

Directus's webhook trigger flows can leak sensitive data

Directus is vulnerable to sensitive data exposure as user data is not being redacted when logged

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in directus

Incorrect Permission Checking for GraphQL Subscriptions

Directus vulnerable to Server-Side Request Forgery On File Import

Directus vulnerable to unhandled exception on illegal filename_disk value

Directus `search` query parameter allows enumeration of non permitted fields

Directus has open redirect in SAML

Directus: Path Traversal and Broken Access Control in File Management API

Directus has an insecure object reference via PATH presets

Directus Lacks Session Tokens Invalidation

Directus vulnerable to extraction of password hashes through export querying

Directus tokens are not redacted in flow logs, exposing session credentials to all admin

Directus Allows Single Sign-On User Enumeration

Directus allows unauthenticated file upload and file modification due to lacking input sanitization

Directus crashes on invalid WebSocket message

Directus: Open Redirect in Admin 2FA Setup Page

Directus: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses in File Import

Directus: GraphQL Alias Amplification Denial of Service Due to Missing Query Cost/Complexity Limits

Directus Vulnerable to User Enumeration via Password Reset Timing Attack

Directus: GraphQL Schema SDL Disclosure Setting

Directus' exact version number is exposed by the OpenAPI Spec

Directus: Missing Cross-Origin Opener Policy

Directus: TUS Upload Authorization Bypass Allows Arbitrary File Overwrite

Directus: Unauthenticated Denial of Service via GraphQL Alias Amplification of Expensive Health Check Resolver