Django REST framework

Lookup for vulnerabilities affecting packages.

Vulnerability_id VCID-ap5v-6yzk-rud6

Summary

Exposure of Sensitive Information to an Unauthorized Actor
Directus is a real-time API and App dashboard for managing SQL database content. In versions prior to 9.16.0 users with read access to the `password` field in `directus_users` can extract the argon2 password hashes by brute forcing the export functionality combined with a `_starts_with` filter. This allows the user to enumerate the password hashes. Accounts cannot be taken over unless the hashes can be reversed which is unlikely with current hardware. This problem has been patched by preventing any hashed/concealed field to be filtered against with the `_starts_with` or other string operator in version 9.16.0. Users are advised to upgrade. Users unable to upgrade may mitigate this issue by ensuring that no user has `read` access to the `password` field in `directus_users`.

Aliases

alias	CVE-2023-27481

alias	GHSA-m5q3-8wgf-x8xf

Fixed_packages

url	pkg:npm/directus@9.16.0
purl	pkg:npm/directus@9.16.0
is_vulnerable	`false`
affected_by_vulnerabilities
resource_url	http://public2.vulnerablecode.io/packages/pkg:npm/directus@9.16.0

Affected_packages

References

reference_url	https://github.com/directus/directus/pull/14829
reference_id
reference_type
scores
url	https://github.com/directus/directus/pull/14829

reference_url	https://github.com/directus/directus/pull/15010
reference_id
reference_type
scores
url	https://github.com/directus/directus/pull/15010

reference_url	https://nvd.nist.gov/vuln/detail/CVE-2023-27481
reference_id	CVE-2023-27481
reference_type
scores
url	https://nvd.nist.gov/vuln/detail/CVE-2023-27481

reference_url	https://github.com/advisories/GHSA-m5q3-8wgf-x8xf
reference_id	GHSA-m5q3-8wgf-x8xf
reference_type
scores
url	https://github.com/advisories/GHSA-m5q3-8wgf-x8xf

reference_url	https://github.com/directus/directus/security/advisories/GHSA-m5q3-8wgf-x8xf
reference_id	GHSA-m5q3-8wgf-x8xf
reference_type
scores
url	https://github.com/directus/directus/security/advisories/GHSA-m5q3-8wgf-x8xf

Weaknesses

cwe_id	1035
name	OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.

cwe_id	200
name	Exposure of Sensitive Information to an Unauthorized Actor
description	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

cwe_id	937
name	OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description	Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.

Exploits

Severity_range_score null

Exploitability null

Weighted_severity null

Risk_score null

Resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-ap5v-6yzk-rud6

Vulnerability Instance