← Database

CVE-2022-23080

MEDIUM CVSS: 5.0 Published: 2022-06-22 Modified: 2026-06-17

Description

In directus versions v9.0.0-beta.2 through 9.6.0 are vulnerable to server-side request forgery (SSRF) in the media upload functionality which allows a low privileged user to perform internal network port scans.

Affected Platforms

Rangerstudio Directus

Weakness Type

CWE-918

References