CVE-2021-26594

In Directus 8.x through 8.8.1, an attacker can switch to the administrator role (via the PATCH method) without any control by the back end

published February 23, 2021

CVSS
—
EPSS
1%
Percentile
67.0
In the wild
Unconfirmed
What it is

In Directus 8.x through 8.8.1, an attacker can switch to the administrator role (via the PATCH method) without any control by the back end. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01165 · 67.0th percentile
Published
2021-02-23T18:59Z
EPSS history
Timeline
  • 23 FEB 18:59Z
    In Directus 8.x through 8.8.1, an attacker can switch to the administrator role (via the PATCH method) without any control by the back end
    cvelistv5