This is a summary of the AI-generated 10-question deep analysis. The full version (longer answers, follow-up Q&A, related CVEs) requires login.
Read the full analysis โ
Q1What is this vulnerability? (Essence + Consequences)
๐ก๏ธ **Root Cause**: CWE-73 (External Control of File Name or Path). The system fails to validate participants before allowing file changes. ๐ **Flaw**: Missing access control on file operations.
Q3Who is affected? (Versions/Components)
๐ฅ **Affected**: Directus versions **10.8.0** up to **11.9.3**. ๐ฆ **Component**: The core file management API. Check your version immediately!
Q4What can hackers do? (Privileges/Data)
๐ต๏ธ **Hackers Can**: Upload malicious files or modify existing ones without authentication. ๐ **Data Impact**: High Integrity loss. No Confidentiality loss (C:N), but system trust is broken.
Q5Is exploitation threshold high? (Auth/Config)
โก **Threshold**: LOW. CVSS shows **AV:N** (Network), **AC:L** (Low Complexity), **PR:N** (No Privileges needed), **UI:N** (No User Interaction). Easy to exploit remotely!
Q6Is there a public Exp? (PoC/Wild Exploitation)
๐ **Exploit Status**: Yes. A presentation PoC exists on GitHub (`r4bbit-r4/directus-preso`). โ ๏ธ **Risk**: Proof-of-concept is public, increasing wild exploitation potential.
Q7How to self-check? (Features/Scanning)
๐ **Self-Check**: Scan for Directus instances running v10.8.0 - v11.9.3. ๐งช **Test**: Attempt unauthenticated file upload requests to the API endpoint. Monitor for unauthorized file changes.
Q8Is it fixed officially? (Patch/Mitigation)
โ **Fixed**: Yes. Official patch available via GitHub commit `d84dcc36f75fc5c858d43746b8f9c426c38d696b`. ๐ข **Advisory**: GHSA-mv33-9f6j-pfmc confirms the fix.
Q9What if no patch? (Workaround)
๐ง **No Patch?**: Isolate the Directus instance. Restrict network access to the file API. Implement strict WAF rules blocking unauthenticated file uploads. ๐ **Mitigation**: Limit exposure until patched.
Q10Is it urgent? (Priority Suggestion)
๐ฅ **Urgency**: HIGH. CVSS Score indicates High Integrity impact with Low Exploitation Cost. ๐ **Action**: Patch immediately. This is a critical integrity vulnerability for CMS platforms.