https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 12:36:58 +0000 https://cve.radiocsirt.org/vuln/cve-2025-55746 <p><strong>Affected:</strong> directus</p> <p>Directus is a real-time API and App dashboard for managing SQL database content. From 10.8.0 to before 11.9.3, a vulnerability exists in the file update mechanism which allows an unauthenticated actor to modify existing files with arbitrary contents (without changes being applied to the files&#39; database-resident metadata) and / or upload new files, with arbitrary content and extensions, which won&#39;t show up in the Directus UI. This vulnerability is fixed in 11.9.3.</p> <p><strong>Affected:</strong> directus</p> <p>Directus is a real-time API and App dashboard for managing SQL database content. From 10.8.0 to before 11.9.3, a vulnerability exists in the file update mechanism which allows an unauthenticated actor to modify existing files with arbitrary contents (without changes being applied to the files&#39; database-resident metadata) and / or upload new files, with arbitrary content and extensions, which won&#39;t show up in the Directus UI. This vulnerability is fixed in 11.9.3.</p> https://cve.radiocsirt.org/vuln/cve-2025-55746