Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 12
Reset filtersDirectus has open redirect in SAML
Directus Vulnerable to Information Leakage in Existing Collections
Directus's conceal fields are searchable if read permissions enabled
Directus allows unauthenticated file upload and file modification due to lacking input sanitization
Directus inserts access token from query string into logs
Suspended Directus user can continue to use session token to access API
Directus allows updates to non-allowed fields due to overlapping policies
Directus allows unauthenticated access to WebSocket events and operations
Directus vulnerable to SSRF Loopback IP filter bypass
Session is cached for OpenID and OAuth2 if `redirect` is not used
Directus Blind SSRF On File Import
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.