CVE-2024-6534: Directus 10.13.0 - Insecure object reference via PATH presets
First published: Thu Aug 15 2024(Updated: )
Directus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to another user. This is possible because the application only validates the user parameter in the 'POST /presets' request but not in the PATCH request. When chained with CVE-2024-6533, it could result in account takeover.
Credit: help@fluidattacks.com help@fluidattacks.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| npm/directus | <=10.13.0 | |
| Directus | =10.13.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-6534?
CVE-2024-6534 is considered a medium severity vulnerability due to its potential impact on user data integrity.
How do I fix CVE-2024-6534?
To fix CVE-2024-6534, update Directus to a version higher than 10.13.0 where the vulnerability is patched.
Who is affected by CVE-2024-6534?
CVE-2024-6534 affects any users of Directus v10.13.0, especially those with authenticated access.
What type of vulnerability is CVE-2024-6534?
CVE-2024-6534 is a privilege escalation vulnerability that allows users to modify presets improperly.
What can an attacker do with CVE-2024-6534?
An attacker can modify presets created by another user using the same user credentials due to insufficient validation.
- agent/title
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/type
- agent/references
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/softwarecombine
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-q83v-hq3j-4pq3
- alias/CVE-2024-6534
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/event
- collector/github-advisory
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/trending
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup-request
- collector/nvd-cve
- package-manager/npm
- vendor/monospace
- canonical/directus
- version/directus/10.13.0