{"action":"Upgrade directus to 9.7.0 or later.","affected":[{"fixed":"9.7.0","introduced":"9.0.0-beta.2"}],"component":"directus","cve_ids":["CVE-2022-23080"],"ecosystem":"npm","epss":0.00826,"exploited":false,"fixed_versions":["9.7.0"],"ghsa_id":"GHSA-5h75-pvq4-82c9","id":"tcs_01M5KF3VJB5C21FXYEVGHXVSSR","modified_at":"2023-11-08T04:08:16.216901Z","published_at":"2022-06-23T00:00:33Z","references":["https://osv.dev/vulnerability/GHSA-5h75-pvq4-82c9","https://nvd.nist.gov/vuln/detail/CVE-2022-23080","https://github.com/directus/directus/commit/6da3f1ed5034115b1da00440008351bf0d808d83","https://github.com/directus/directus","https://www.mend.io/vulnerability-database/CVE-2022-23080"],"severity":{"label":"medium","score":5},"sources":[{"source":"osv","source_id":"GHSA-5h75-pvq4-82c9","url":"https://osv.dev/vulnerability/GHSA-5h75-pvq4-82c9"}],"summary":"Server-Side Request Forgery in Directus"}