diff --git a/advisories/github-reviewed/2024/08/GHSA-qf6h-p3mr-vmh5/GHSA-qf6h-p3mr-vmh5.json b/advisories/github-reviewed/2024/08/GHSA-qf6h-p3mr-vmh5/GHSA-qf6h-p3mr-vmh5.json index 16bac5e0aaa..9bc7bf0aafd 100644 --- a/advisories/github-reviewed/2024/08/GHSA-qf6h-p3mr-vmh5/GHSA-qf6h-p3mr-vmh5.json +++ b/advisories/github-reviewed/2024/08/GHSA-qf6h-p3mr-vmh5/GHSA-qf6h-p3mr-vmh5.json @@ -1,13 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-qf6h-p3mr-vmh5", - "modified": "2024-08-19T21:03:10Z", + "modified": "2025-03-22T00:35:38Z", "published": "2024-08-15T03:30:28Z", - "aliases": [ - "CVE-2024-6533" - ], - "summary": "Code injection in Directus", - "details": "Directus v10.13.0 allows an authenticated external attacker to execute arbitrary JavaScript on the client. This is possible because the application injects an attacker-controlled parameter that will be stored in the server and used by the client into an unsanitized DOM element. When chained with CVE-2024-6534, it could result in account takeover.", + "withdrawn": "2025-03-22T00:35:38Z", + "aliases": [], + "summary": "Duplicate Advisory: Code injection in Directus", + "details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-9qrm-48qf-r2rw. This link is maintained to preserve external references.\n\n## Original Description\nDirectus v10.13.0 allows an authenticated external attacker to execute arbitrary JavaScript on the client. This is possible because the application injects an attacker-controlled parameter that will be stored in the server and used by the client into an unsanitized DOM element. When chained with CVE-2024-6534, it could result in account takeover.", "severity": [ { "type": "CVSS_V3",