CVE-2024-34708
1 advisory.
npm/directus CVE-2024-34708: medium 4.9
Directus allows redacted data extraction on the API through "alias"
Action: Upgrade directus to 10.11.0 or later.
npm i directus@10.11.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.11.0 | - |
Fixed versions
| 10.11.0 |
Sources
- osv: GHSA-p8v3-m643-4xqx
- https://github.com/directus/directus/security/advisories/GHSA-p8v3-m643-4xqx
- https://nvd.nist.gov/vuln/detail/CVE-2024-34708
- https://github.com/directus/directus/commit/e70a90c267bea695afce6545174c2b77517d617b
- https://github.com/directus/directus
CVE-2024-34708 · published · modified · JSON