CVE-2021-26595

In Directus 8.x through 8.8.1, an attacker can learn sensitive information such as the version of the CMS, the PHP version used by the site, and the name of…

published February 23, 2021

CVSS
—
EPSS
1%
Percentile
52.7
In the wild
Unconfirmed
What it is

In Directus 8.x through 8.8.1, an attacker can learn sensitive information such as the version of the CMS, the PHP version used by the site, and the name of the DBMS, simply by view the result of the api-aa, called automatically upon a connection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00702 · 52.7th percentile
Published
2021-02-23T19:00Z
EPSS history
Timeline
  • 23 FEB 19:00Z
    In Directus 8.x through 8.8.1, an attacker can learn sensitive information such as the version of the CMS, the PHP version used by the site, and the name of…
    cvelistv5