CVE-2024-45596

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Directus is a real-time API and App dashboard for managing SQL database content. An unauthenticated user can access credentials of last authenticated user via OpenID or OAuth2 where the authentication URL did not include redirect query string. This happens because on that endpoint for both OpenId and Oauth2 Directus is using the respond middleware, which by default will try to cache GET requests that met some conditions. Although, those conditions do not include this scenario, when an unauthenticated request returns user credentials. This vulnerability is fixed in 10.13.3 and 11.1.0.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-524

Affected software

No affected versions have been published.

Timeline

Published
Sep 10, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-455975.3Pluto is a superset of Lua 5.4 with a focus on general-purpose programming. Scripts passing user-controlled values to http.request header vaCVE-2024-455984.9Cacti is an open source performance and fault management framework. Prior to 1.2.29, an administrator can change the `Poller Standard Error CVE-2024-455993.8Cursor is an artificial intelligence code editor. Prior to version 0.41.0, if a user on macOS has granted Cursor access to the camera or micCVE-2024-45609.8The Kognetiks Chatbot for WordPress plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the CVE-2024-456007.7Fields is a GLPI plugin that allows users to add custom fields on GLPI items forms. Prior to 1.21.13, an authenticated user can perform a SQCVE-2024-456017.5Mesop is a Python-based UI framework designed for rapid web apps development. A vulnerability has been discovered and fixed in Mesop that coCVE-2024-456044.3Contao is an Open Source CMS. In affected versions authenticated users in the back end can list files outside the document root in the file CVE-2024-456054.3Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notificatiCVE-2024-456064.3Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user can mute alert rules from arbitrary orCVE-2024-456075.3whatsapp-api-js is a TypeScript server agnostic Whatsapp's Official API framework. It's possible to check the payload validation using the WCVE-2024-456088.8GLPI is a free asset and IT management software package. An authenticated user can perfom a SQL injection by changing its preferences. UpgraCVE-2024-456096.1GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.