netbird/advisory-database
0
0
Fork 0
mirror of https://github.com/netbirdio/advisory-database.git synced 2026-05-22 18:04:22 -07:00
Code Issues Packages Projects Releases Wiki Activity

Publish GHSA-qf6h-p3mr-vmh5

Browse Source
This commit is contained in:
advisory-database[bot]
2025-03-22 00:37:19 +00:00
parent 40f96dc723
commit d7068c27ee
1 changed files with 5 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
advisories/github-reviewed/2024/08/GHSA-qf6h-p3mr-vmh5/GHSA-qf6h-p3mr-vmh5.json
+5 -6
View File
@@ -1,13 +1,12 @@
{
"schema_version": "1.4.0",
"id": "GHSA-qf6h-p3mr-vmh5",
"modified": "2024-08-19T21:03:10Z",
"modified": "2025-03-22T00:35:38Z",
"published": "2024-08-15T03:30:28Z",
"aliases": [
"CVE-2024-6533"
],
"summary": "Code injection in Directus",
"details": "Directus v10.13.0 allows an authenticated external attacker to execute arbitrary JavaScript on the client. This is possible because the application injects an attacker-controlled parameter that will be stored in the server and used by the client into an unsanitized DOM element. When chained with CVE-2024-6534, it could result in account takeover.",
"withdrawn": "2025-03-22T00:35:38Z",
"aliases": [],
"summary": "Duplicate Advisory: Code injection in Directus",
"details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-9qrm-48qf-r2rw. This link is maintained to preserve external references.\n\n## Original Description\nDirectus v10.13.0 allows an authenticated external attacker to execute arbitrary JavaScript on the client. This is possible because the application injects an attacker-controlled parameter that will be stored in the server and used by the client into an unsanitized DOM element. When chained with CVE-2024-6534, it could result in account takeover.",
"severity": [
{
"type": "CVSS_V3",