Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2024-46990

MEDIUM
Published 2024-09-18T16:55:24.255Z
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2024-46990. We'll provide specific mitigation strategies based on your environment and risk profile.

CVSS Score

V3.1
5.0
/10
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Base Score Metrics
Exploitability: N/A Impact: N/A

EPSS Score

v2025.03.14
0.000
probability
of exploitation in the wild

There is a 0.0% chance that this vulnerability will be exploited in the wild within the next 30 days.

Updated: 2025-06-25
Exploit Probability
Percentile: 0.090
Higher than 9.0% of all CVEs

Attack Vector Metrics

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED

Impact Metrics

Confidentiality
LOW
Integrity
NONE
Availability
NONE

Description

Directus is a real-time API and App dashboard for managing SQL database content. When relying on blocking access to localhost using the default `0.0.0.0` filter a user may bypass this block by using other registered loopback devices (like `127.0.0.2` - `127.127.127.127`). This issue has been addressed in release versions 10.13.3 and 11.1.0. Users are advised to upgrade. Users unable to upgrade may block this bypass by manually adding the `127.0.0.0/8` CIDR range which will block access to any `127.X.X.X` ip instead of just `127.0.0.1`.

Available Exploits

No exploits available for this CVE.

Related News

No news articles found for this CVE.

Affected Products

directus

directus

Affected Versions:

< 10.13.3 >= 11.0.0, < 11.1.0

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

✓ GitHub Reviewed MODERATE

Directus vulnerable to SSRF Loopback IP filter bypass

GHSA-68g8-c275-xf2m

Advisory Details

### Impact If you're relying on blocking access to localhost using the default `0.0.0.0` filter this can be bypassed using other registered loopback devices (like `127.0.0.2` - `127.127.127.127`) ### Workaround You can block this bypass by manually adding the `127.0.0.0/8` CIDR range which will block access to any `127.X.X.X` ip instead of just `127.0.0.1`.

Affected Packages

npm directus
ECOSYSTEM: ≥0 <10.13.3
npm directus
ECOSYSTEM: ≥11.0.0 <11.1.0
npm @directus/api
ECOSYSTEM: ≥0 <21.0.0
npm @directus/api
ECOSYSTEM: ≥22.0.0 <22.1.1

CVSS Scoring

CVSS Score

5.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

References

WEB https://github.com/directus/directus/security/advisories/GHSA-68g8-c275-xf2m
ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2024-46990
WEB https://github.com/directus/directus/commit/4aace0bbe57232e38cd6a287ee475293e46dc91b
WEB https://github.com/directus/directus/commit/769fa22797bff5a9231599883b391e013f122e52
WEB https://github.com/directus/directus/commit/8cbf943b65fd4a763d09a5fdbba8996b1e7797ff
WEB https://github.com/directus/directus/commit/c1f3ccc681595038d094ce110ddeee38cb38f431
PACKAGE https://github.com/directus/directus

Advisory provided by GitHub Security Advisory Database. Published: September 18, 2024, Modified: September 18, 2024

References

https://github.com/directus/directus/security/advisories/GHSA-68g8-c275-xf2m
https://github.com/directus/directus/commit/4aace0bbe57232e38cd6a287ee475293e46dc91b
https://github.com/directus/directus/commit/769fa22797bff5a9231599883b391e013f122e52
https://github.com/directus/directus/commit/8cbf943b65fd4a763d09a5fdbba8996b1e7797ff
https://github.com/directus/directus/commit/c1f3ccc681595038d094ce110ddeee38cb38f431
Published: 2024-09-18T16:55:24.255Z
Last Modified: 2024-09-18T18:19:24.086Z
Copied to clipboard!