CVE-2025-24353

MEDIUM EPSS 29.0%
Published Jan 23, 20251y ago · Modified Jun 17, 20262w ago
4.3 CVSS 3.1
Medium
Find Similar
Published Jan 23, 2025 1y ago
Last Modified Jun 17, 2026 2w ago

Description

Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 11.2.0, when sharing an item, a typical user can specify an arbitrary role. It allows the user to use a higher-privileged role to see fields that otherwise the user should not be able to see. Instances that are impacted are those that use the share feature and have specific roles hierarchy and fields that are not visible for certain roles. Version 11.2.0 contains a patch the issue.

CVSS Details

Base Score
4.3
Exploitability
2.8
Impact
1.4
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality Low
Integrity None
Availability None

Threat Intelligence

EPSS Exploit Probability
29.0% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-269 Improper Privilege Management Authorization

Affected Products 1

VendorProductVersionRange
monospacedirectus* <11.2.0

References 5

  • github.com https://github.com/directus/directus/commit/e288a43a79613dada905da683f4919c6965ac804
    Patch
  • github.com https://github.com/directus/directus/pull/23716
    Issue Tracking
  • github.com https://github.com/directus/directus/releases/tag/v11.2.0
    Release Notes
  • github.com https://github.com/directus/directus/security/advisories/GHSA-pmf4-v838-29hg
    ExploitVendor Advisory
  • youtube.com https://www.youtube.com/watch?v=DbV4IxbWzN4
    Exploit

Remediation

  • github.com https://github.com/directus/directus/commit/e288a43a79613dada905da683f4919c6965ac804
    Patch