Vulnerability · Published Jan 23, 2025 · Assigned by GitHub_M
CVE-2025-24353Directus privilege escalation vulnerability using Share feature
Medium 5.0
In plain English
A medium-severity privilege mismanagement in directus from directus. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 11.2.0, when sharing an item, a typical user can specify an arbitrary role. It allows the user to use a higher-privileged role to see fields that otherwise the user should not be able to see. Instances that are impacted are those that use the share feature and have specific roles hierarchy and fields that are not visible for certain roles. Version 11.2.0 contains a patch the issue.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| npm | @directus/app | 13.3.1 | GHSA-pmf4-v838-29hg |
| npm | directus | 11.2.0 | GHSA-pmf4-v838-29hg |
Affected products (as reported)
Weakness: CWE-269 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
References
- https://github.com/directus/directus/security/advisories/GHSA-pmf4-v838-29hg x_refsource_CONFIRM
- https://github.com/directus/directus/pull/23716 x_refsource_MISC
- https://github.com/directus/directus/commit/e288a43a79613dada905da683f4919c6965ac804 x_refsource_MISC
- https://github.com/directus/directus/releases/tag/v11.2.0 x_refsource_MISC
- https://www.youtube.com/watch?v=DbV4IxbWzN4 x_refsource_MISC