From d7068c27ee36172774fdba92b5f0daaf85925bb7 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Sat, 22 Mar 2025 00:37:19 +0000 Subject: [PATCH] Publish GHSA-qf6h-p3mr-vmh5 --- .../08/GHSA-qf6h-p3mr-vmh5/GHSA-qf6h-p3mr-vmh5.json | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/advisories/github-reviewed/2024/08/GHSA-qf6h-p3mr-vmh5/GHSA-qf6h-p3mr-vmh5.json b/advisories/github-reviewed/2024/08/GHSA-qf6h-p3mr-vmh5/GHSA-qf6h-p3mr-vmh5.json index 16bac5e0aaa..9bc7bf0aafd 100644 --- a/advisories/github-reviewed/2024/08/GHSA-qf6h-p3mr-vmh5/GHSA-qf6h-p3mr-vmh5.json +++ b/advisories/github-reviewed/2024/08/GHSA-qf6h-p3mr-vmh5/GHSA-qf6h-p3mr-vmh5.json @@ -1,13 +1,12 @@ { "schema_version": "1.4.0", "id": "GHSA-qf6h-p3mr-vmh5", - "modified": "2024-08-19T21:03:10Z", + "modified": "2025-03-22T00:35:38Z", "published": "2024-08-15T03:30:28Z", - "aliases": [ - "CVE-2024-6533" - ], - "summary": "Code injection in Directus", - "details": "Directus v10.13.0 allows an authenticated external attacker to execute arbitrary JavaScript on the client. This is possible because the application injects an attacker-controlled parameter that will be stored in the server and used by the client into an unsanitized DOM element. When chained with CVE-2024-6534, it could result in account takeover.", + "withdrawn": "2025-03-22T00:35:38Z", + "aliases": [], + "summary": "Duplicate Advisory: Code injection in Directus", + "details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-9qrm-48qf-r2rw. This link is maintained to preserve external references.\n\n## Original Description\nDirectus v10.13.0 allows an authenticated external attacker to execute arbitrary JavaScript on the client. This is possible because the application injects an attacker-controlled parameter that will be stored in the server and used by the client into an unsanitized DOM element. When chained with CVE-2024-6534, it could result in account takeover.", "severity": [ { "type": "CVSS_V3",