Directus
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 15 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from January 23, 2025 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Directus before 12.1.0 Authorization Bypass via Public WebSocket REST Interface
Directus: Authorization-dependent response served from unsegmented cache key
Directus exposes sensitive fields in revision history
Directus has a Path Traversal and Broken Access Control in File Management API
Directus Affected by User Enumeration via Password Reset Timing Attack
Directus Vulnerable to Information Leakage in Existing Collections
Directus's conceal fields are searchable if read permissions enabled
Directus Vulnerable to Stored Cross-site Scripting
Directus has Improper Permission Handling on Deleted Fields
Directus allows unauthenticated file upload and file modification due to lacking input sanitization
Monitor Directus in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.