https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:12:22 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-206295 EUVD-2026-206295 https://cve.radiocsirt.org/vuln/euvd-2026-206295 https://cve.radiocsirt.org/vuln/fkie_cve-2024-54128 <p>Directus is a real-time API and App dashboard for managing SQL database content. The Comment feature has implemented a filter to prevent users from adding restricted characters, such as HTML tags. However, this filter operates on the client-side, which can be bypassed, making the application vulnerable to HTML Injection. This vulerability is fixed in 10.13.4 and 11.2.0.</p> <p>Directus is a real-time API and App dashboard for managing SQL database content. The Comment feature has implemented a filter to prevent users from adding restricted characters, such as HTML tags. However, this filter operates on the client-side, which can be bypassed, making the application vulnerable to HTML Injection. This vulerability is fixed in 10.13.4 and 11.2.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-54128 https://cve.radiocsirt.org/vuln/ghsa-r6wx-627v-gh2f <p><strong>Affected:</strong> npm: @directus/app, npm: directus</p> <p>### Summary The Comment feature has implemented a filter to prevent users from adding restricted characters, such as HTML tags. However, this filter operates on the client-side, which can be bypassed, making the application vulnerable to HTML Injection.</p> <p>### Details The Comment feature implements a character filter on the client-side, this can be bypassed by directly sending a request to the endpoint.</p> <p>Example Request:</p> <p>``` PATCH /activity/comment/3 HTTP/2 Host: directus.local</p> <p>{ &#34;comment&#34;: &#34;&lt;h1&gt;TEST &lt;p style=\&#34;color:red\&#34;&gt;HTML INJECTION&lt;/p&gt; &lt;a href=\&#34;//evil.com\&#34;&gt;Test Link&lt;/a&gt;&lt;/h1&gt;&#34; } ```</p> <p>Example Response:</p> <p>```json { &#34;data&#34;: { &#34;id&#34;: 3, &#34;action&#34;: &#34;comment&#34;, &#34;user&#34;: &#34;288fdccc-399a-40a1-ac63-811bf62e6a18&#34;, &#34;timestamp&#34;: &#34;2023-09-06T02:23:40.740Z&#34;, &#34;ip&#34;: &#34;10.42.0.1&#34;, &#34;user_agent&#34;: &#34;Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36&#34;, &#34;collection&#34;: &#34;directus_files&#34;, &#34;item&#34;: &#34;7247dda1-c386-4e7a-8121-7e9c1a42c15a&#34;, &#34;comment&#34;: &#34;&lt;h1&gt;TEST &lt;p style=\&#34;color:red\&#34;&gt;HTML INJECTION&lt;/p&gt; &lt;a href=\&#34;//evil.com\&#34;&gt;Test Link&lt;/a&gt;&lt;/h1&gt;&#34;, &#34;origin&#34;: &#34;https://directus.local&#34;, &#34;revisions&#34;: [] } } ```</p> <p>Example Result:</p> <p></p> <p>## Impact</p> <p>With the introduction of session cookies this issue has become exploitable as a malicious script is now able to do authenticated acti…</p> <p><strong>Affected:</strong> npm: @directus/app, npm: directus</p> <p>### Summary The Comment feature has implemented a filter to prevent users from adding restricted characters, such as HTML tags. However, this filter operates on the client-side, which can be bypassed, making the application vulnerable to HTML Injection.</p> <p>### Details The Comment feature implements a character filter on the client-side, this can be bypassed by directly sending a request to the endpoint.</p> <p>Example Request:</p> <p>``` PATCH /activity/comment/3 HTTP/2 Host: directus.local</p> <p>{ &#34;comment&#34;: &#34;&lt;h1&gt;TEST &lt;p style=\&#34;color:red\&#34;&gt;HTML INJECTION&lt;/p&gt; &lt;a href=\&#34;//evil.com\&#34;&gt;Test Link&lt;/a&gt;&lt;/h1&gt;&#34; } ```</p> <p>Example Response:</p> <p>```json { &#34;data&#34;: { &#34;id&#34;: 3, &#34;action&#34;: &#34;comment&#34;, &#34;user&#34;: &#34;288fdccc-399a-40a1-ac63-811bf62e6a18&#34;, &#34;timestamp&#34;: &#34;2023-09-06T02:23:40.740Z&#34;, &#34;ip&#34;: &#34;10.42.0.1&#34;, &#34;user_agent&#34;: &#34;Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Safari/537.36&#34;, &#34;collection&#34;: &#34;directus_files&#34;, &#34;item&#34;: &#34;7247dda1-c386-4e7a-8121-7e9c1a42c15a&#34;, &#34;comment&#34;: &#34;&lt;h1&gt;TEST &lt;p style=\&#34;color:red\&#34;&gt;HTML INJECTION&lt;/p&gt; &lt;a href=\&#34;//evil.com\&#34;&gt;Test Link&lt;/a&gt;&lt;/h1&gt;&#34;, &#34;origin&#34;: &#34;https://directus.local&#34;, &#34;revisions&#34;: [] } } ```</p> <p>Example Result:</p> <p></p> <p>## Impact</p> <p>With the introduction of session cookies this issue has become exploitable as a malicious script is now able to do authenticated acti…</p> https://cve.radiocsirt.org/vuln/ghsa-r6wx-627v-gh2f