Published: 23/02/2021 Updated: 23/02/2021

Vulnerability Summary

** UNSUPPORTED WHEN ASSIGNED ** In Directus 8.x up to and including 8.8.1, an attacker can switch to the administrator role (via the PATCH method) without any control by the back end. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Most Upvoted Vulmon Research Post

There is no Researcher post for this vulnerability
Would you like to share something about it? Sign up now to share your knowledge with the community.

Vulnerability Trend

Github Repositories

Directus V8 This article aims to discuss about security issues found in CMS Directus in version 872 In a professional context, I process security audit against Web application running under CMS Directus From security best practices assessment, I found several flaws which can have a significant impact on overall security The audited platform is using php 74, mysql (VERSION