{"action":"Upgrade directus to 9.23.3 or later.","affected":[{"fixed":"9.23.3","introduced":"0"}],"component":"directus","cve_ids":["CVE-2023-28443"],"ecosystem":"npm","epss":0.00312,"exploited":false,"fixed_versions":["9.23.3"],"ghsa_id":"GHSA-8vg2-wf3q-mwv7","id":"tcs_01M5KFE1P5RNKTX06AD54VEN9Q","modified_at":"2023-11-08T04:12:11.139205Z","published_at":"2023-03-23T19:47:12Z","references":["https://osv.dev/vulnerability/GHSA-8vg2-wf3q-mwv7","https://github.com/directus/directus/security/advisories/GHSA-8vg2-wf3q-mwv7","https://nvd.nist.gov/vuln/detail/CVE-2023-28443","https://github.com/directus/directus/commit/349536303983ccba68ecb3e4fb35315424011afc","https://github.com/directus/directus","https://github.com/directus/directus/blob/7c479c5161639aac466c763b6b958a9524201d74/api/src/logger.ts#L13"],"severity":{"label":"medium","score":4.2},"sources":[{"source":"osv","source_id":"GHSA-8vg2-wf3q-mwv7","url":"https://osv.dev/vulnerability/GHSA-8vg2-wf3q-mwv7"}],"summary":"directus vulnerable to Insertion of Sensitive Information into Log File"}