PT-2022-23129 · Directus · Directus

Witold Gorecki · Published 2022-08-19 · Updated 2022-08-30 · CVE-2022-36031

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Directus versions prior to 9.15.0

Description The Directus process can be aborted by having an authorized user update the filename disk value to a folder and accessing that file through the "/assets" endpoint. This issue has been patched and release v9.15.0 contains the fix. Users are advised to upgrade to prevent the problem.

Recommendations For versions prior to 9.15.0, upgrade to version 9.15.0 or later to resolve the issue. As a temporary workaround for users unable to upgrade, prevent the problem by making sure no (untrusted) non-admin users have permissions to update the filename disk field on directus files.

Exploit

Fix

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-755

Related Identifiers

CVE-2022-36031

GHSA-77QM-WVQQ-FG79

Affected Products

Directus

References · 8

• 🔥 https://github.com/directus/directus/security/advisories/GHSA-77qm-wvqq-fg79 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/36xxx/CVE-2022-36031.json · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-36031 · Security Note
• https://osv.dev/vulnerability/GHSA-77qm-wvqq-fg79 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-36031 · Vendor Advisory
• https://github.com/directus/directus · Note
• https://t.me/cibsecurity/48462 · Telegram Post
• https://t.me/cvenotify/34998 · Telegram Post