Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-ghbw-eqaz-jqhs
SummaryDirectus is a real-time API and App dashboard for managing SQL database content. Starting in version 11.0.0 and prior to version 11.3.0, when setting `WEBSOCKETS_GRAPHQL_AUTH` or `WEBSOCKETS_REST_AUTH` to "public", an unauthenticated user is able to do any of the supported operations (CRUD, subscriptions) with full admin privileges. This impacts any Directus instance that has either `WEBSOCKETS_GRAPHQL_AUTH` or `WEBSOCKETS_REST_AUTH` set to `public` allowing unauthenticated users to subscribe for changes on any collection or do REST CRUD operations on user defined collections ignoring permissions. Version 11.3.0 fixes the issue.
Aliases
0
alias CVE-2024-54151
1
alias GHSA-849r-qrwj-8rv4
Fixed_packages
0
url pkg:npm/directus@11.3.0
purl pkg:npm/directus@11.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32e6-c1bv-efea
1
vulnerability VCID-3u2p-nh39-5qag
2
vulnerability VCID-45yr-y58u-aqb8
3
vulnerability VCID-4z1u-rtza-83bj
4
vulnerability VCID-79ch-vtkp-q3cd
5
vulnerability VCID-8q3p-rrv2-jba5
6
vulnerability VCID-9dsr-kz3s-hkdx
7
vulnerability VCID-9r91-qgfa-x7ak
8
vulnerability VCID-a1y7-cmk1-4ffn
9
vulnerability VCID-ah8z-vr21-wfd6
10
vulnerability VCID-bc42-4j4d-tudj
11
vulnerability VCID-bg96-h5bt-xfbb
12
vulnerability VCID-c4eu-udp3-uuen
13
vulnerability VCID-d8vm-nuff-uffc
14
vulnerability VCID-dcw5-6ct3-b3ev
15
vulnerability VCID-ga3s-595f-2keq
16
vulnerability VCID-qfnx-egwg-ybgp
17
vulnerability VCID-rdpb-7dcd-fyby
18
vulnerability VCID-rren-vtar-23fm
19
vulnerability VCID-snux-8b2e-9kd6
20
vulnerability VCID-tp8r-hnf7-fkaf
21
vulnerability VCID-u5hw-p46t-jybc
22
vulnerability VCID-ufth-uy5w-87fe
23
vulnerability VCID-v6mk-ybv3-tyc8
24
vulnerability VCID-v9s1-9n1m-bubs
25
vulnerability VCID-y6cy-k9c2-pkcb
26
vulnerability VCID-ywqb-qrvw-hfbh
27
vulnerability VCID-z5ud-p9th-mff2
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/directus@11.3.0
1
url pkg:npm/%40directus/api@23.2.0
purl pkg:npm/%40directus/api@23.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3u2p-nh39-5qag
1
vulnerability VCID-8q3p-rrv2-jba5
2
vulnerability VCID-qfnx-egwg-ybgp
3
vulnerability VCID-rdpb-7dcd-fyby
4
vulnerability VCID-tp8r-hnf7-fkaf
5
vulnerability VCID-ufth-uy5w-87fe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540directus/api@23.2.0
Affected_packages
0
url pkg:npm/directus@11.0.0
purl pkg:npm/directus@11.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32e6-c1bv-efea
1
vulnerability VCID-3u2p-nh39-5qag
2
vulnerability VCID-3vnr-k31f-vycv
3
vulnerability VCID-45yr-y58u-aqb8
4
vulnerability VCID-4z1u-rtza-83bj
5
vulnerability VCID-54ja-4vrx-tbgm
6
vulnerability VCID-79ch-vtkp-q3cd
7
vulnerability VCID-8q3p-rrv2-jba5
8
vulnerability VCID-9dsr-kz3s-hkdx
9
vulnerability VCID-9r91-qgfa-x7ak
10
vulnerability VCID-a1y7-cmk1-4ffn
11
vulnerability VCID-ah8z-vr21-wfd6
12
vulnerability VCID-bc42-4j4d-tudj
13
vulnerability VCID-bg96-h5bt-xfbb
14
vulnerability VCID-c4eu-udp3-uuen
15
vulnerability VCID-d8vm-nuff-uffc
16
vulnerability VCID-dcw5-6ct3-b3ev
17
vulnerability VCID-ga3s-595f-2keq
18
vulnerability VCID-gf4m-ad8j-7bbn
19
vulnerability VCID-ghbw-eqaz-jqhs
20
vulnerability VCID-jtg3-4cp8-8fe6
21
vulnerability VCID-qfnx-egwg-ybgp
22
vulnerability VCID-qrf3-cz1h-8kau
23
vulnerability VCID-rdpb-7dcd-fyby
24
vulnerability VCID-rren-vtar-23fm
25
vulnerability VCID-snux-8b2e-9kd6
26
vulnerability VCID-tp8r-hnf7-fkaf
27
vulnerability VCID-u5hw-p46t-jybc
28
vulnerability VCID-ufth-uy5w-87fe
29
vulnerability VCID-v6mk-ybv3-tyc8
30
vulnerability VCID-v9s1-9n1m-bubs
31
vulnerability VCID-y6cy-k9c2-pkcb
32
vulnerability VCID-ywqb-qrvw-hfbh
33
vulnerability VCID-z5ud-p9th-mff2
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/directus@11.0.0
1
url pkg:npm/directus@11.0.1
purl pkg:npm/directus@11.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32e6-c1bv-efea
1
vulnerability VCID-3u2p-nh39-5qag
2
vulnerability VCID-3vnr-k31f-vycv
3
vulnerability VCID-45yr-y58u-aqb8
4
vulnerability VCID-4z1u-rtza-83bj
5
vulnerability VCID-54ja-4vrx-tbgm
6
vulnerability VCID-79ch-vtkp-q3cd
7
vulnerability VCID-8q3p-rrv2-jba5
8
vulnerability VCID-9dsr-kz3s-hkdx
9
vulnerability VCID-9r91-qgfa-x7ak
10
vulnerability VCID-a1y7-cmk1-4ffn
11
vulnerability VCID-ah8z-vr21-wfd6
12
vulnerability VCID-bc42-4j4d-tudj
13
vulnerability VCID-bg96-h5bt-xfbb
14
vulnerability VCID-c4eu-udp3-uuen
15
vulnerability VCID-d8vm-nuff-uffc
16
vulnerability VCID-dcw5-6ct3-b3ev
17
vulnerability VCID-ga3s-595f-2keq
18
vulnerability VCID-gf4m-ad8j-7bbn
19
vulnerability VCID-ghbw-eqaz-jqhs
20
vulnerability VCID-jtg3-4cp8-8fe6
21
vulnerability VCID-qfnx-egwg-ybgp
22
vulnerability VCID-qrf3-cz1h-8kau
23
vulnerability VCID-rdpb-7dcd-fyby
24
vulnerability VCID-rren-vtar-23fm
25
vulnerability VCID-snux-8b2e-9kd6
26
vulnerability VCID-tp8r-hnf7-fkaf
27
vulnerability VCID-u5hw-p46t-jybc
28
vulnerability VCID-ufth-uy5w-87fe
29
vulnerability VCID-v6mk-ybv3-tyc8
30
vulnerability VCID-v9s1-9n1m-bubs
31
vulnerability VCID-y6cy-k9c2-pkcb
32
vulnerability VCID-ywqb-qrvw-hfbh
33
vulnerability VCID-z5ud-p9th-mff2
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/directus@11.0.1
2
url pkg:npm/directus@11.0.2
purl pkg:npm/directus@11.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32e6-c1bv-efea
1
vulnerability VCID-3u2p-nh39-5qag
2
vulnerability VCID-3vnr-k31f-vycv
3
vulnerability VCID-45yr-y58u-aqb8
4
vulnerability VCID-4z1u-rtza-83bj
5
vulnerability VCID-54ja-4vrx-tbgm
6
vulnerability VCID-79ch-vtkp-q3cd
7
vulnerability VCID-8q3p-rrv2-jba5
8
vulnerability VCID-9dsr-kz3s-hkdx
9
vulnerability VCID-9r91-qgfa-x7ak
10
vulnerability VCID-a1y7-cmk1-4ffn
11
vulnerability VCID-ah8z-vr21-wfd6
12
vulnerability VCID-bc42-4j4d-tudj
13
vulnerability VCID-bg96-h5bt-xfbb
14
vulnerability VCID-c4eu-udp3-uuen
15
vulnerability VCID-d8vm-nuff-uffc
16
vulnerability VCID-dcw5-6ct3-b3ev
17
vulnerability VCID-ga3s-595f-2keq
18
vulnerability VCID-gf4m-ad8j-7bbn
19
vulnerability VCID-ghbw-eqaz-jqhs
20
vulnerability VCID-jtg3-4cp8-8fe6
21
vulnerability VCID-qfnx-egwg-ybgp
22
vulnerability VCID-qrf3-cz1h-8kau
23
vulnerability VCID-rdpb-7dcd-fyby
24
vulnerability VCID-rren-vtar-23fm
25
vulnerability VCID-snux-8b2e-9kd6
26
vulnerability VCID-tp8r-hnf7-fkaf
27
vulnerability VCID-u5hw-p46t-jybc
28
vulnerability VCID-ufth-uy5w-87fe
29
vulnerability VCID-v6mk-ybv3-tyc8
30
vulnerability VCID-v9s1-9n1m-bubs
31
vulnerability VCID-y6cy-k9c2-pkcb
32
vulnerability VCID-ywqb-qrvw-hfbh
33
vulnerability VCID-z5ud-p9th-mff2
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/directus@11.0.2
3
url pkg:npm/directus@11.1.0
purl pkg:npm/directus@11.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32e6-c1bv-efea
1
vulnerability VCID-3u2p-nh39-5qag
2
vulnerability VCID-3vnr-k31f-vycv
3
vulnerability VCID-45yr-y58u-aqb8
4
vulnerability VCID-4z1u-rtza-83bj
5
vulnerability VCID-79ch-vtkp-q3cd
6
vulnerability VCID-8q3p-rrv2-jba5
7
vulnerability VCID-9dsr-kz3s-hkdx
8
vulnerability VCID-9r91-qgfa-x7ak
9
vulnerability VCID-a1y7-cmk1-4ffn
10
vulnerability VCID-ah8z-vr21-wfd6
11
vulnerability VCID-bc42-4j4d-tudj
12
vulnerability VCID-bg96-h5bt-xfbb
13
vulnerability VCID-c4eu-udp3-uuen
14
vulnerability VCID-d8vm-nuff-uffc
15
vulnerability VCID-dcw5-6ct3-b3ev
16
vulnerability VCID-ga3s-595f-2keq
17
vulnerability VCID-gf4m-ad8j-7bbn
18
vulnerability VCID-ghbw-eqaz-jqhs
19
vulnerability VCID-jtg3-4cp8-8fe6
20
vulnerability VCID-qfnx-egwg-ybgp
21
vulnerability VCID-rdpb-7dcd-fyby
22
vulnerability VCID-rren-vtar-23fm
23
vulnerability VCID-snux-8b2e-9kd6
24
vulnerability VCID-tp8r-hnf7-fkaf
25
vulnerability VCID-u5hw-p46t-jybc
26
vulnerability VCID-ufth-uy5w-87fe
27
vulnerability VCID-v6mk-ybv3-tyc8
28
vulnerability VCID-v9s1-9n1m-bubs
29
vulnerability VCID-y6cy-k9c2-pkcb
30
vulnerability VCID-ywqb-qrvw-hfbh
31
vulnerability VCID-z5ud-p9th-mff2
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/directus@11.1.0
4
url pkg:npm/directus@11.1.1
purl pkg:npm/directus@11.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32e6-c1bv-efea
1
vulnerability VCID-3u2p-nh39-5qag
2
vulnerability VCID-3vnr-k31f-vycv
3
vulnerability VCID-45yr-y58u-aqb8
4
vulnerability VCID-4z1u-rtza-83bj
5
vulnerability VCID-79ch-vtkp-q3cd
6
vulnerability VCID-8q3p-rrv2-jba5
7
vulnerability VCID-9dsr-kz3s-hkdx
8
vulnerability VCID-9r91-qgfa-x7ak
9
vulnerability VCID-a1y7-cmk1-4ffn
10
vulnerability VCID-ah8z-vr21-wfd6
11
vulnerability VCID-bc42-4j4d-tudj
12
vulnerability VCID-bg96-h5bt-xfbb
13
vulnerability VCID-c4eu-udp3-uuen
14
vulnerability VCID-d8vm-nuff-uffc
15
vulnerability VCID-dcw5-6ct3-b3ev
16
vulnerability VCID-ga3s-595f-2keq
17
vulnerability VCID-gf4m-ad8j-7bbn
18
vulnerability VCID-ghbw-eqaz-jqhs
19
vulnerability VCID-jtg3-4cp8-8fe6
20
vulnerability VCID-qfnx-egwg-ybgp
21
vulnerability VCID-rdpb-7dcd-fyby
22
vulnerability VCID-rren-vtar-23fm
23
vulnerability VCID-snux-8b2e-9kd6
24
vulnerability VCID-tp8r-hnf7-fkaf
25
vulnerability VCID-u5hw-p46t-jybc
26
vulnerability VCID-ufth-uy5w-87fe
27
vulnerability VCID-v6mk-ybv3-tyc8
28
vulnerability VCID-v9s1-9n1m-bubs
29
vulnerability VCID-y6cy-k9c2-pkcb
30
vulnerability VCID-ywqb-qrvw-hfbh
31
vulnerability VCID-z5ud-p9th-mff2
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/directus@11.1.1
5
url pkg:npm/directus@11.1.2
purl pkg:npm/directus@11.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32e6-c1bv-efea
1
vulnerability VCID-3u2p-nh39-5qag
2
vulnerability VCID-45yr-y58u-aqb8
3
vulnerability VCID-4z1u-rtza-83bj
4
vulnerability VCID-79ch-vtkp-q3cd
5
vulnerability VCID-8q3p-rrv2-jba5
6
vulnerability VCID-9dsr-kz3s-hkdx
7
vulnerability VCID-9r91-qgfa-x7ak
8
vulnerability VCID-a1y7-cmk1-4ffn
9
vulnerability VCID-ah8z-vr21-wfd6
10
vulnerability VCID-bc42-4j4d-tudj
11
vulnerability VCID-bg96-h5bt-xfbb
12
vulnerability VCID-c4eu-udp3-uuen
13
vulnerability VCID-d8vm-nuff-uffc
14
vulnerability VCID-dcw5-6ct3-b3ev
15
vulnerability VCID-ga3s-595f-2keq
16
vulnerability VCID-gf4m-ad8j-7bbn
17
vulnerability VCID-ghbw-eqaz-jqhs
18
vulnerability VCID-jtg3-4cp8-8fe6
19
vulnerability VCID-qfnx-egwg-ybgp
20
vulnerability VCID-rdpb-7dcd-fyby
21
vulnerability VCID-rren-vtar-23fm
22
vulnerability VCID-snux-8b2e-9kd6
23
vulnerability VCID-tp8r-hnf7-fkaf
24
vulnerability VCID-u5hw-p46t-jybc
25
vulnerability VCID-ufth-uy5w-87fe
26
vulnerability VCID-v6mk-ybv3-tyc8
27
vulnerability VCID-v9s1-9n1m-bubs
28
vulnerability VCID-y6cy-k9c2-pkcb
29
vulnerability VCID-ywqb-qrvw-hfbh
30
vulnerability VCID-z5ud-p9th-mff2
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/directus@11.1.2
6
url pkg:npm/directus@11.2.0
purl pkg:npm/directus@11.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32e6-c1bv-efea
1
vulnerability VCID-3u2p-nh39-5qag
2
vulnerability VCID-45yr-y58u-aqb8
3
vulnerability VCID-4z1u-rtza-83bj
4
vulnerability VCID-79ch-vtkp-q3cd
5
vulnerability VCID-8q3p-rrv2-jba5
6
vulnerability VCID-9dsr-kz3s-hkdx
7
vulnerability VCID-9r91-qgfa-x7ak
8
vulnerability VCID-a1y7-cmk1-4ffn
9
vulnerability VCID-ah8z-vr21-wfd6
10
vulnerability VCID-bc42-4j4d-tudj
11
vulnerability VCID-bg96-h5bt-xfbb
12
vulnerability VCID-c4eu-udp3-uuen
13
vulnerability VCID-d8vm-nuff-uffc
14
vulnerability VCID-dcw5-6ct3-b3ev
15
vulnerability VCID-ga3s-595f-2keq
16
vulnerability VCID-ghbw-eqaz-jqhs
17
vulnerability VCID-jtg3-4cp8-8fe6
18
vulnerability VCID-qfnx-egwg-ybgp
19
vulnerability VCID-rdpb-7dcd-fyby
20
vulnerability VCID-rren-vtar-23fm
21
vulnerability VCID-snux-8b2e-9kd6
22
vulnerability VCID-tp8r-hnf7-fkaf
23
vulnerability VCID-u5hw-p46t-jybc
24
vulnerability VCID-ufth-uy5w-87fe
25
vulnerability VCID-v6mk-ybv3-tyc8
26
vulnerability VCID-v9s1-9n1m-bubs
27
vulnerability VCID-y6cy-k9c2-pkcb
28
vulnerability VCID-ywqb-qrvw-hfbh
29
vulnerability VCID-z5ud-p9th-mff2
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/directus@11.2.0
7
url pkg:npm/directus@11.2.1
purl pkg:npm/directus@11.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32e6-c1bv-efea
1
vulnerability VCID-3u2p-nh39-5qag
2
vulnerability VCID-45yr-y58u-aqb8
3
vulnerability VCID-4z1u-rtza-83bj
4
vulnerability VCID-79ch-vtkp-q3cd
5
vulnerability VCID-8q3p-rrv2-jba5
6
vulnerability VCID-9dsr-kz3s-hkdx
7
vulnerability VCID-9r91-qgfa-x7ak
8
vulnerability VCID-a1y7-cmk1-4ffn
9
vulnerability VCID-ah8z-vr21-wfd6
10
vulnerability VCID-bc42-4j4d-tudj
11
vulnerability VCID-bg96-h5bt-xfbb
12
vulnerability VCID-c4eu-udp3-uuen
13
vulnerability VCID-d8vm-nuff-uffc
14
vulnerability VCID-dcw5-6ct3-b3ev
15
vulnerability VCID-ga3s-595f-2keq
16
vulnerability VCID-ghbw-eqaz-jqhs
17
vulnerability VCID-jtg3-4cp8-8fe6
18
vulnerability VCID-qfnx-egwg-ybgp
19
vulnerability VCID-rdpb-7dcd-fyby
20
vulnerability VCID-rren-vtar-23fm
21
vulnerability VCID-snux-8b2e-9kd6
22
vulnerability VCID-tp8r-hnf7-fkaf
23
vulnerability VCID-u5hw-p46t-jybc
24
vulnerability VCID-ufth-uy5w-87fe
25
vulnerability VCID-v6mk-ybv3-tyc8
26
vulnerability VCID-v9s1-9n1m-bubs
27
vulnerability VCID-y6cy-k9c2-pkcb
28
vulnerability VCID-ywqb-qrvw-hfbh
29
vulnerability VCID-z5ud-p9th-mff2
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/directus@11.2.1
8
url pkg:npm/directus@11.2.2
purl pkg:npm/directus@11.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-32e6-c1bv-efea
1
vulnerability VCID-3u2p-nh39-5qag
2
vulnerability VCID-45yr-y58u-aqb8
3
vulnerability VCID-4z1u-rtza-83bj
4
vulnerability VCID-79ch-vtkp-q3cd
5
vulnerability VCID-8q3p-rrv2-jba5
6
vulnerability VCID-9dsr-kz3s-hkdx
7
vulnerability VCID-9r91-qgfa-x7ak
8
vulnerability VCID-a1y7-cmk1-4ffn
9
vulnerability VCID-ah8z-vr21-wfd6
10
vulnerability VCID-bc42-4j4d-tudj
11
vulnerability VCID-bg96-h5bt-xfbb
12
vulnerability VCID-c4eu-udp3-uuen
13
vulnerability VCID-d8vm-nuff-uffc
14
vulnerability VCID-dcw5-6ct3-b3ev
15
vulnerability VCID-ga3s-595f-2keq
16
vulnerability VCID-ghbw-eqaz-jqhs
17
vulnerability VCID-qfnx-egwg-ybgp
18
vulnerability VCID-rdpb-7dcd-fyby
19
vulnerability VCID-rren-vtar-23fm
20
vulnerability VCID-snux-8b2e-9kd6
21
vulnerability VCID-tp8r-hnf7-fkaf
22
vulnerability VCID-u5hw-p46t-jybc
23
vulnerability VCID-ufth-uy5w-87fe
24
vulnerability VCID-v6mk-ybv3-tyc8
25
vulnerability VCID-v9s1-9n1m-bubs
26
vulnerability VCID-y6cy-k9c2-pkcb
27
vulnerability VCID-ywqb-qrvw-hfbh
28
vulnerability VCID-z5ud-p9th-mff2
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/directus@11.2.2
9
url pkg:npm/%40directus/api@22.2.0
purl pkg:npm/%40directus/api@22.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3u2p-nh39-5qag
1
vulnerability VCID-3vnr-k31f-vycv
2
vulnerability VCID-8q3p-rrv2-jba5
3
vulnerability VCID-ghbw-eqaz-jqhs
4
vulnerability VCID-qfnx-egwg-ybgp
5
vulnerability VCID-rdpb-7dcd-fyby
6
vulnerability VCID-tp8r-hnf7-fkaf
7
vulnerability VCID-ufth-uy5w-87fe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540directus/api@22.2.0
10
url pkg:npm/%40directus/api@23.0.0
purl pkg:npm/%40directus/api@23.0.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3u2p-nh39-5qag
1
vulnerability VCID-3vnr-k31f-vycv
2
vulnerability VCID-8q3p-rrv2-jba5
3
vulnerability VCID-ghbw-eqaz-jqhs
4
vulnerability VCID-qfnx-egwg-ybgp
5
vulnerability VCID-rdpb-7dcd-fyby
6
vulnerability VCID-tp8r-hnf7-fkaf
7
vulnerability VCID-ufth-uy5w-87fe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540directus/api@23.0.0
11
url pkg:npm/%40directus/api@23.1.0
purl pkg:npm/%40directus/api@23.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3u2p-nh39-5qag
1
vulnerability VCID-8q3p-rrv2-jba5
2
vulnerability VCID-ghbw-eqaz-jqhs
3
vulnerability VCID-qfnx-egwg-ybgp
4
vulnerability VCID-rdpb-7dcd-fyby
5
vulnerability VCID-tp8r-hnf7-fkaf
6
vulnerability VCID-ufth-uy5w-87fe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540directus/api@23.1.0
12
url pkg:npm/%40directus/api@23.1.1
purl pkg:npm/%40directus/api@23.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3u2p-nh39-5qag
1
vulnerability VCID-8q3p-rrv2-jba5
2
vulnerability VCID-ghbw-eqaz-jqhs
3
vulnerability VCID-qfnx-egwg-ybgp
4
vulnerability VCID-rdpb-7dcd-fyby
5
vulnerability VCID-tp8r-hnf7-fkaf
6
vulnerability VCID-ufth-uy5w-87fe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540directus/api@23.1.1
13
url pkg:npm/%40directus/api@23.1.2
purl pkg:npm/%40directus/api@23.1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3u2p-nh39-5qag
1
vulnerability VCID-8q3p-rrv2-jba5
2
vulnerability VCID-ghbw-eqaz-jqhs
3
vulnerability VCID-qfnx-egwg-ybgp
4
vulnerability VCID-rdpb-7dcd-fyby
5
vulnerability VCID-tp8r-hnf7-fkaf
6
vulnerability VCID-ufth-uy5w-87fe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540directus/api@23.1.2
14
url pkg:npm/%40directus/api@23.1.3
purl pkg:npm/%40directus/api@23.1.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3u2p-nh39-5qag
1
vulnerability VCID-8q3p-rrv2-jba5
2
vulnerability VCID-ghbw-eqaz-jqhs
3
vulnerability VCID-qfnx-egwg-ybgp
4
vulnerability VCID-rdpb-7dcd-fyby
5
vulnerability VCID-tp8r-hnf7-fkaf
6
vulnerability VCID-ufth-uy5w-87fe
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/%2540directus/api@23.1.3
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-54151
reference_id
reference_type
scores
0
value 0.00525
scoring_system epss
scoring_elements 0.6754
published_at 2026-06-14T12:55:00Z
1
value 0.00525
scoring_system epss
scoring_elements 0.67529
published_at 2026-06-12T12:55:00Z
2
value 0.00525
scoring_system epss
scoring_elements 0.67542
published_at 2026-06-13T12:55:00Z
3
value 0.00525
scoring_system epss
scoring_elements 0.67438
published_at 2026-06-11T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-54151
1
reference_url https://github.com/directus/directus
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/directus/directus
2
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-54151
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2024-54151
3
reference_url https://github.com/directus/directus/commit/ce0397d16cf767b5293cd57f626c5349b5732a21
reference_id ce0397d16cf767b5293cd57f626c5349b5732a21
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system generic_textual
scoring_elements
2
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-10T16:10:28Z/
url https://github.com/directus/directus/commit/ce0397d16cf767b5293cd57f626c5349b5732a21
4
reference_url https://github.com/advisories/GHSA-849r-qrwj-8rv4
reference_id GHSA-849r-qrwj-8rv4
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-849r-qrwj-8rv4
5
reference_url https://github.com/directus/directus/security/advisories/GHSA-849r-qrwj-8rv4
reference_id GHSA-849r-qrwj-8rv4
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-12-10T16:10:28Z/
url https://github.com/directus/directus/security/advisories/GHSA-849r-qrwj-8rv4
Weaknesses
0
cwe_id 200
name Exposure of Sensitive Information to an Unauthorized Actor
description The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score7.0 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-ghbw-eqaz-jqhs