CVE-2022-22117: Directus - Stored Cross-Site Scripting (XSS) in Profile Avatar Image

Published Jan 10, 2022
·
Updated

In Directus, versions 9.0.0-alpha.4 through 9.4.1 allow unrestricted file upload of .html files in the media upload functionality, which leads to Cross-Site Scripting vulnerability. A low privileged attacker can upload a crafted HTML file as a profile avatar, and when an admin or another user opens it, the XSS payload gets triggered.

Affected Software

153 affected components
Rangerstudio Directus>=9.0.1<=9.4.1
Rangerstudio Directus=9.0.0
Rangerstudio Directus=9.0.0-alpha10
Rangerstudio Directus=9.0.0-alpha11
Rangerstudio Directus=9.0.0-alpha12
Rangerstudio Directus=9.0.0-alpha13
Rangerstudio Directus=9.0.0-alpha14
Rangerstudio Directus=9.0.0-alpha15
Rangerstudio Directus=9.0.0-alpha16
Rangerstudio Directus=9.0.0-alpha17
Rangerstudio Directus=9.0.0-alpha18
Rangerstudio Directus=9.0.0-alpha19
Rangerstudio Directus=9.0.0-alpha20
Rangerstudio Directus=9.0.0-alpha21
Rangerstudio Directus=9.0.0-alpha22
Rangerstudio Directus=9.0.0-alpha23
Rangerstudio Directus=9.0.0-alpha24
Rangerstudio Directus=9.0.0-alpha25
Rangerstudio Directus=9.0.0-alpha26
Rangerstudio Directus=9.0.0-alpha27
Rangerstudio Directus=9.0.0-alpha31
Rangerstudio Directus=9.0.0-alpha32
Rangerstudio Directus=9.0.0-alpha33
Rangerstudio Directus=9.0.0-alpha34
Rangerstudio Directus=9.0.0-alpha35
Rangerstudio Directus=9.0.0-alpha36
Rangerstudio Directus=9.0.0-alpha37
Rangerstudio Directus=9.0.0-alpha38
Rangerstudio Directus=9.0.0-alpha39
Rangerstudio Directus=9.0.0-alpha4
Rangerstudio Directus=9.0.0-alpha40
Rangerstudio Directus=9.0.0-alpha41
Rangerstudio Directus=9.0.0-alpha42
Rangerstudio Directus=9.0.0-alpha5
Rangerstudio Directus=9.0.0-alpha6
Rangerstudio Directus=9.0.0-alpha7
Rangerstudio Directus=9.0.0-alpha8
Rangerstudio Directus=9.0.0-alpha9
Rangerstudio Directus=9.0.0-beta0
Rangerstudio Directus=9.0.0-beta1
Rangerstudio Directus=9.0.0-beta10
Rangerstudio Directus=9.0.0-beta11
Rangerstudio Directus=9.0.0-beta12
Rangerstudio Directus=9.0.0-beta13
Rangerstudio Directus=9.0.0-beta14
Rangerstudio Directus=9.0.0-beta2
Rangerstudio Directus=9.0.0-beta3
Rangerstudio Directus=9.0.0-beta4
Rangerstudio Directus=9.0.0-beta5
Rangerstudio Directus=9.0.0-beta7
Rangerstudio Directus=9.0.0-beta8
Rangerstudio Directus=9.0.0-beta9
Rangerstudio Directus=9.0.0-rc0
Rangerstudio Directus=9.0.0-rc1
Rangerstudio Directus=9.0.0-rc10
Rangerstudio Directus=9.0.0-rc100
Rangerstudio Directus=9.0.0-rc101
Rangerstudio Directus=9.0.0-rc11
Rangerstudio Directus=9.0.0-rc12
Rangerstudio Directus=9.0.0-rc13
Rangerstudio Directus=9.0.0-rc14
Rangerstudio Directus=9.0.0-rc15
Rangerstudio Directus=9.0.0-rc17
Rangerstudio Directus=9.0.0-rc18
Rangerstudio Directus=9.0.0-rc19
Rangerstudio Directus=9.0.0-rc2
Rangerstudio Directus=9.0.0-rc20
Rangerstudio Directus=9.0.0-rc21
Rangerstudio Directus=9.0.0-rc22
Rangerstudio Directus=9.0.0-rc23
Rangerstudio Directus=9.0.0-rc24
Rangerstudio Directus=9.0.0-rc25
Rangerstudio Directus=9.0.0-rc26
Rangerstudio Directus=9.0.0-rc27
Rangerstudio Directus=9.0.0-rc28
Rangerstudio Directus=9.0.0-rc29
Rangerstudio Directus=9.0.0-rc3
Rangerstudio Directus=9.0.0-rc30
Rangerstudio Directus=9.0.0-rc31
Rangerstudio Directus=9.0.0-rc32
Rangerstudio Directus=9.0.0-rc33
Rangerstudio Directus=9.0.0-rc34
Rangerstudio Directus=9.0.0-rc35
Rangerstudio Directus=9.0.0-rc36
Rangerstudio Directus=9.0.0-rc37
Rangerstudio Directus=9.0.0-rc38
Rangerstudio Directus=9.0.0-rc39
Rangerstudio Directus=9.0.0-rc4
Rangerstudio Directus=9.0.0-rc40
Rangerstudio Directus=9.0.0-rc41
Rangerstudio Directus=9.0.0-rc42
Rangerstudio Directus=9.0.0-rc43
Rangerstudio Directus=9.0.0-rc44
Rangerstudio Directus=9.0.0-rc45
Rangerstudio Directus=9.0.0-rc46
Rangerstudio Directus=9.0.0-rc47
Rangerstudio Directus=9.0.0-rc48
Rangerstudio Directus=9.0.0-rc49
Rangerstudio Directus=9.0.0-rc5
Rangerstudio Directus=9.0.0-rc50
Rangerstudio Directus=9.0.0-rc51
Rangerstudio Directus=9.0.0-rc52
Rangerstudio Directus=9.0.0-rc53
Rangerstudio Directus=9.0.0-rc54
Rangerstudio Directus=9.0.0-rc55
Rangerstudio Directus=9.0.0-rc56
Rangerstudio Directus=9.0.0-rc57
Rangerstudio Directus=9.0.0-rc58
Rangerstudio Directus=9.0.0-rc59
Rangerstudio Directus=9.0.0-rc6
Rangerstudio Directus=9.0.0-rc60
Rangerstudio Directus=9.0.0-rc61
Rangerstudio Directus=9.0.0-rc62
Rangerstudio Directus=9.0.0-rc63
Rangerstudio Directus=9.0.0-rc64
Rangerstudio Directus=9.0.0-rc65
Rangerstudio Directus=9.0.0-rc66
Rangerstudio Directus=9.0.0-rc67
Rangerstudio Directus=9.0.0-rc68
Rangerstudio Directus=9.0.0-rc69
Rangerstudio Directus=9.0.0-rc7
Rangerstudio Directus=9.0.0-rc70
Rangerstudio Directus=9.0.0-rc71
Rangerstudio Directus=9.0.0-rc72
Rangerstudio Directus=9.0.0-rc73
Rangerstudio Directus=9.0.0-rc74
Rangerstudio Directus=9.0.0-rc75
Rangerstudio Directus=9.0.0-rc76
Rangerstudio Directus=9.0.0-rc77
Rangerstudio Directus=9.0.0-rc78
Rangerstudio Directus=9.0.0-rc79
Rangerstudio Directus=9.0.0-rc8
Rangerstudio Directus=9.0.0-rc80
Rangerstudio Directus=9.0.0-rc81
Rangerstudio Directus=9.0.0-rc82
Rangerstudio Directus=9.0.0-rc83
Rangerstudio Directus=9.0.0-rc84
Rangerstudio Directus=9.0.0-rc85
Rangerstudio Directus=9.0.0-rc86
Rangerstudio Directus=9.0.0-rc87
Rangerstudio Directus=9.0.0-rc88
Rangerstudio Directus=9.0.0-rc89
Rangerstudio Directus=9.0.0-rc9
Rangerstudio Directus=9.0.0-rc90
Rangerstudio Directus=9.0.0-rc91
Rangerstudio Directus=9.0.0-rc92
Rangerstudio Directus=9.0.0-rc93
Rangerstudio Directus=9.0.0-rc94
Rangerstudio Directus=9.0.0-rc95
Rangerstudio Directus=9.0.0-rc96
Rangerstudio Directus=9.0.0-rc97
Rangerstudio Directus=9.0.0-rc98
Rangerstudio Directus=9.0.0-rc99

Remediation

Patch Available

https://github.com/directus/directus/commit/ec86d5412d45136915d9b622b4a890dd26932b10

Information

Update to directus version 9.4.2

Event History

Jan 10, 2022
CVE Published
via MITRE·03:26 PM
Data Sourced
via MITRE·03:26 PM
RemedyDescriptionSeverityWeakness
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2022-22117?

CVE-2022-22117 is classified with a low severity due to the potential for Cross-Site Scripting (XSS) attacks from uploading crafted HTML files.

2

How do I fix CVE-2022-22117?

To fix CVE-2022-22117, upgrade your Directus installation to version 9.4.2 or later where the vulnerability has been addressed.

3

What versions of Directus are affected by CVE-2022-22117?

CVE-2022-22117 affects Directus versions 9.0.0-alpha.4 through 9.4.1.

4

What type of vulnerability is CVE-2022-22117?

CVE-2022-22117 is a Cross-Site Scripting (XSS) vulnerability due to unrestricted file upload of .html files.

5

Who can exploit CVE-2022-22117?

A low privileged attacker can exploit CVE-2022-22117 by uploading a crafted HTML file as a profile avatar.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203