Directus up to 8.8.1 Upload Directory unrestricted upload

entryeditHistoryDiffjsonxmlCTI

A vulnerability, which was classified as critical, was found in Directus up to 8.8.1. Affected is an unknown functionality of the component Upload Directory Handler. Upgrading to version 8.8.2 eliminates this vulnerability.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
11117799	04/08/2021	VulD...	price_0day	$0-$5k	see documentation	04/08/2021	accepted	90
11117798	04/08/2021	VulD...	cvss3_meta_tempscore	6.3	see documentation	04/08/2021	accepted	90
11117797	04/08/2021	VulD...	cvss3_meta_basescore	6.3	see documentation	04/08/2021	accepted	90
11117796	04/08/2021	VulD...	cvss3_vuldb_tempscore	6.3		04/08/2021	accepted	90
11117795	04/08/2021	VulD...	cvss3_vuldb_basescore	6.3		04/08/2021	accepted	90
11117794	04/08/2021	VulD...	cvss2_vuldb_tempscore	6.0		04/08/2021	accepted	90
11117793	04/08/2021	VulD...	cvss2_vuldb_basescore	6.0		04/08/2021	accepted	90
11117792	04/08/2021	VulD...	cvss3_vuldb_e	X	derived from historical data	04/08/2021	accepted	80
11117791	04/08/2021	VulD...	cvss3_vuldb_s	U	derived from historical data	04/08/2021	accepted	80
11117790	04/08/2021	VulD...	cvss3_vuldb_ac	L	derived from historical data	04/08/2021	accepted	80
11117789	04/08/2021	VulD...	cvss2_vuldb_e	ND	derived from historical data	04/08/2021	accepted	80
11117788	04/08/2021	VulD...	cvss2_vuldb_au	S	derived from historical data	04/08/2021	accepted	80
11117787	04/08/2021	VulD...	cvss2_vuldb_ac	M	derived from historical data	04/08/2021	accepted	80
11117786	04/08/2021	VulD...	cvss2_vuldb_rl	OF	derived from vuldb v3 vector	04/08/2021	accepted	80
11117785	04/08/2021	VulD...	cvss2_vuldb_rc	C	derived from vuldb v3 vector	04/08/2021	accepted	80
11117784	04/08/2021	VulD...	cvss2_vuldb_ai	P	derived from vuldb v3 vector	04/08/2021	accepted	80
11117783	04/08/2021	VulD...	cvss2_vuldb_ii	P	derived from vuldb v3 vector	04/08/2021	accepted	80
11117782	04/08/2021	VulD...	cvss2_vuldb_ci	P	derived from vuldb v3 vector	04/08/2021	accepted	80
11117781	04/08/2021	VulD...	cvss2_vuldb_av	N	derived from vuldb v3 vector	04/08/2021	accepted	80
11117780	04/08/2021	VulD...	date	1617832800 (04/08/2021)		04/08/2021	accepted	90

Directus up to 8.8.1 Upload Directory unrestricted upload

User

Field

Commit Conf

Approve Conf

🔒 Login Required

Do you want to use VulDB in your project?