https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 07:39:01 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-260800 EUVD-2026-260800 https://cve.radiocsirt.org/vuln/euvd-2026-260800 https://cve.radiocsirt.org/vuln/fkie_cve-2025-64748 <p>Directus is a real-time API and App dashboard for managing SQL database content. A vulnerability in versions prior to 11.13.0 allows authenticated users to search concealed/sensitive fields when they have read permissions. While actual values remain masked (`****`), successful matches can be detected through returned records, enabling enumeration attacks on sensitive data. Version 11.13.0 fixes the issue.</p> <p>Directus is a real-time API and App dashboard for managing SQL database content. A vulnerability in versions prior to 11.13.0 allows authenticated users to search concealed/sensitive fields when they have read permissions. While actual values remain masked (`****`), successful matches can be detected through returned records, enabling enumeration attacks on sensitive data. Version 11.13.0 fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-64748 https://cve.radiocsirt.org/vuln/ghsa-8jpw-gpr4-8cmh <p><strong>Affected:</strong> npm: directus, npm: @directus/api</p> <p>## Summary</p> <p>A vulnerability allows authenticated users to search concealed/sensitive fields when they have read permissions. While actual values remain masked (`****`), successful matches can be detected through returned records, enabling enumeration attacks on sensitive data.</p> <p>## Details</p> <p>The system permits search operations on concealed fields in the `directus_users` collection, including `token`, `tfa_secret`, `password`. Matching records are returned with masked values, but their presence confirms the searched value exists.</p> <p>The &#34;Recommended Defaults&#34; for &#34;App Access&#34; grant users full read permissions to their role/user records, inadvertently enabling them to search for any user&#39;s tokens, TFA secrets, and password hashes. Attackers can leverage known password hashes from breach databases to identify accounts with compromised passwords.</p> <p># Impact</p> <p>This vulnerability enables: - **Token enumeration** - Verification of valid authentication tokens - **Password hash matching** - Identification of accounts using known compromised passwords - **Information disclosure** - Confirmation of sensitive value existence without viewing actual data - **Increased attack surface** - Default permissions automatically expose all deployments using recommended settings</p> <p>The risk is particularly high for password fields, where attackers can cross-reference publicly available hash databases to identify vulnerable accounts.</p> <p><strong>Affected:</strong> npm: directus, npm: @directus/api</p> <p>## Summary</p> <p>A vulnerability allows authenticated users to search concealed/sensitive fields when they have read permissions. While actual values remain masked (`****`), successful matches can be detected through returned records, enabling enumeration attacks on sensitive data.</p> <p>## Details</p> <p>The system permits search operations on concealed fields in the `directus_users` collection, including `token`, `tfa_secret`, `password`. Matching records are returned with masked values, but their presence confirms the searched value exists.</p> <p>The &#34;Recommended Defaults&#34; for &#34;App Access&#34; grant users full read permissions to their role/user records, inadvertently enabling them to search for any user&#39;s tokens, TFA secrets, and password hashes. Attackers can leverage known password hashes from breach databases to identify accounts with compromised passwords.</p> <p># Impact</p> <p>This vulnerability enables: - **Token enumeration** - Verification of valid authentication tokens - **Password hash matching** - Identification of accounts using known compromised passwords - **Information disclosure** - Confirmation of sensitive value existence without viewing actual data - **Increased attack surface** - Default permissions automatically expose all deployments using recommended settings</p> <p>The risk is particularly high for password fields, where attackers can cross-reference publicly available hash databases to identify vulnerable accounts.</p> https://cve.radiocsirt.org/vuln/ghsa-8jpw-gpr4-8cmh