Логотип exploitDog
bind:CVE-2024-27296
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2024-27296

Количество 2

Количество 2

nvd логотип

CVE-2024-27296

почти 2 года назад

Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 10.8.3, the exact Directus version number was being shipped in compiled JS bundles which are accessible without authentication. With this information a malicious attacker can trivially look for known vulnerabilities in Directus core or any of its shipped dependencies in that specific running version. The problem has been resolved in versions 10.8.3 and newer.

CVSS3: 5.3
EPSS: Низкий
github логотип

GHSA-5mhg-wv8w-p59j

почти 2 года назад

Directus version number disclosure

CVSS3: 5.3
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2024-27296

Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 10.8.3, the exact Directus version number was being shipped in compiled JS bundles which are accessible without authentication. With this information a malicious attacker can trivially look for known vulnerabilities in Directus core or any of its shipped dependencies in that specific running version. The problem has been resolved in versions 10.8.3 and newer.

CVSS3: 5.3
0%
Низкий
почти 2 года назад
github логотип
GHSA-5mhg-wv8w-p59j

Directus version number disclosure

CVSS3: 5.3
0%
Низкий
почти 2 года назад

Уязвимостей на страницу