CVE-2022-23080

Published: 2022-06-22T16:15Z

Last Modified: 2024-11-21T06:47Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

In directus versions v9.0.0-beta.2 through 9.6.0 are vulnerable to server-side request forgery (SSRF) in the media upload functionality which allows a low privileged user to perform internal network port scans. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt