This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login. Read the full analysis β
Q1What is this vulnerability? (Essence + Consequences)
π‘οΈ **Root Cause**: CWE-73 (External Control of File Name or Path). The system fails to validate participants before allowing file changes. π **Flaw**: Missing access control on file operations.
Q3Who is affected? (Versions/Components)
π₯ **Affected**: Directus versions **10.8.0** up to **11.9.3**. π¦ **Component**: The core file management API. Check your version immediately!
Q4What can hackers do? (Privileges/Data)
π΅οΈ **Hackers Can**: Upload malicious files or modify existing ones without authentication. π **Data Impact**: High Integrity loss. No Confidentiality loss (C:N), but system trust is broken.
Q5Is exploitation threshold high? (Auth/Config)
β‘ **Threshold**: LOW. CVSS shows **AV:N** (Network), **AC:L** (Low Complexity), **PR:N** (No Privileges needed), **UI:N** (No User Interaction). Easy to exploit remotely!
Q6Is there a public Exp? (PoC/Wild Exploitation)
π **Exploit Status**: Yes. A presentation PoC exists on GitHub (`r4bbit-r4/directus-preso`). β οΈ **Risk**: Proof-of-concept is public, increasing wild exploitation potential.
Q7How to self-check? (Features/Scanning)
π **Self-Check**: Scan for Directus instances running v10.8.0 - v11.9.3. π§ͺ **Test**: Attempt unauthenticated file upload requests to the API endpoint. Monitor for unauthorized file changes.
Q8Is it fixed officially? (Patch/Mitigation)
β **Fixed**: Yes. Official patch available via GitHub commit `d84dcc36f75fc5c858d43746b8f9c426c38d696b`. π’ **Advisory**: GHSA-mv33-9f6j-pfmc confirms the fix.
Q9What if no patch? (Workaround)
π§ **No Patch?**: Isolate the Directus instance. Restrict network access to the file API. Implement strict WAF rules blocking unauthenticated file uploads. π **Mitigation**: Limit exposure until patched.
Q10Is it urgent? (Priority Suggestion)
π₯ **Urgency**: HIGH. CVSS Score indicates High Integrity impact with Low Exploitation Cost. π **Action**: Patch immediately. This is a critical integrity vulnerability for CMS platforms.