https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T18:20:13.579860+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-64748 CVE-2025-64748 — Directus's conceal fields are searchable if read permissions enabled 2026-10-07T18:20:13.581715+00:00

Affected: directus

Directus is a real-time API and App dashboard for managing SQL database content. A vulnerability in versions prior to 11.13.0 allows authenticated users to search concealed/sensitive fields when they have read permissions. While actual values remain masked (`****`), successful matches can be detected through returned records, enabling enumeration attacks on sensitive data. Version 11.13.0 fixes the issue.