CVE-2026-61836

Katalog CVE

CVSS 8.6 · High EPSS 0,47%

Kerentanan Use of Cache Containing Sensitive Information pada monospace directus. Skor CVSS 3.1 8.6 (High) menurut github.com.

Deskripsi (NVD)

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 12.0.0, when response caching is enabled, the cache-key derivation in api/src/utils/get-cache-key.ts includes version, path, query, and accountability.user but omits authorization context such as share, role, roles, admin, app, and policies. Directus share tokens and anonymous requests can both reduce to user null, so different shares or anonymous clients requesting the same URL and query can receive a permission-filtered cached response without permission re-evaluation. This issue is fixed in version 12.0.0.

Rincian

Terbit di NVD

15 Juli 2026

Terakhir diubah

28 Juli 2026

Status NVD

Analyzed

CVSS 3.1

8.6 (High), sumber github.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-524: Use of Cache Containing Sensitive Information
CWE-639: Authorization Bypass Through User-Controlled Key

EPSS (30 hari)

0,47% peluang dieksploitasi; lebih tinggi dari 39,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/directus/directus/security/advisories/GHSA-c6w9-5g5j-jh2p advisory vendor
• https://github.com/directus/directus/commit/7ba4efb97525d3af33570537c76e44baea767f13 patch
• https://github.com/directus/directus/pull/27707 issue tracking · patch
• https://github.com/directus/directus/releases/tag/v12.0.0 release notes