From e96dbf760339a1f8354371e6b9db1c0564d729f4 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Thu, 20 Mar 2025 18:36:15 +0000
Subject: [PATCH] Publish GHSA-q83v-hq3j-4pq3

---
 .../08/GHSA-q83v-hq3j-4pq3/GHSA-q83v-hq3j-4pq3.json   | 11 +++++------
 1 file changed, 5 insertions(+), 6 deletions(-)

diff --git a/advisories/github-reviewed/2024/08/GHSA-q83v-hq3j-4pq3/GHSA-q83v-hq3j-4pq3.json b/advisories/github-reviewed/2024/08/GHSA-q83v-hq3j-4pq3/GHSA-q83v-hq3j-4pq3.json
index c733199209c..ebbfc2b3a18 100644
--- a/advisories/github-reviewed/2024/08/GHSA-q83v-hq3j-4pq3/GHSA-q83v-hq3j-4pq3.json
+++ b/advisories/github-reviewed/2024/08/GHSA-q83v-hq3j-4pq3/GHSA-q83v-hq3j-4pq3.json
@@ -1,13 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-q83v-hq3j-4pq3",
-  "modified": "2024-08-19T21:03:39Z",
+  "modified": "2025-03-20T18:34:46Z",
   "published": "2024-08-15T06:32:22Z",
-  "aliases": [
-    "CVE-2024-6534"
-  ],
-  "summary": "Improper access control in Directus",
-  "details": "Directus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to another user. This is possible because the application only validates the user parameter in the 'POST /presets' request but not in the PATCH request. When chained with CVE-2024-6533, it could result in account takeover.",
+  "withdrawn": "2025-03-20T18:34:46Z",
+  "aliases": [],
+  "summary": "Duplicate Advisory: Improper access control in Directus",
+  "details": "## Duplicate Advisory\nThis advisory has been withdrawn because it is a duplicate of GHSA-3fff-gqw3-vj86. This link is maintained to preserve external references.\n\n## Original Description\nDirectus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to another user. This is possible because the application only validates the user parameter in the 'POST /presets' request but not in the PATCH request. When chained with CVE-2024-6533, it could result in account takeover.",
   "severity": [
     {
       "type": "CVSS_V3",