GitHub Advisoryadvisory · npm

GHSA-4hmq-ggrm-qfc6 directus vulnerable to HTML Injection in Password Reset email to custom Reset URL

HIGH Published 2023-03-07 Modified 2023-03-07 Official page ↗
Aliases
CVE-2023-27474
Ecosystem
npm
Packages
directus
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-79
Reviewed
2023-03-07

Affected packages

• npm directus: < 9.23.0 → fixed in 9.23.0

Description

Impact Instances relying on an allow-listed reset URL are vulnerable to an HTML injection attack through the use of query parameters in the reset URL. Patches The problem has been resolved and released under version 9.23.0. People relying on a custom password reset URL should upgrade to 9.23.0 or later, or remove the custom reset url from the configured allow list. Workarounds Disable the custom reset URL allow list.

Related

Alias · CVE (1)

  • CVE-2023-27474 Directus is a real-time API and App dashboard for managing SQL database content. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References