Directus Fixes SSO User Enumeration Vulnerability
CVE-2024-39896

5.3MEDIUM

Key Information:

Vendor

Directus

Status
Directus
Vendor
CVE Published:
8 July 2024

What is CVE-2024-39896?

Directus is a real-time API and App dashboard for managing SQL database content. When relying on SSO providers in combination with local authentication it can be possible to enumerate existing SSO users in the instance. This is possible because if an email address exists in Directus and belongs to a known SSO provider then it will throw a "helpful" error that the user belongs to another provider. This vulnerability is fixed in 10.13.0.

References

https://github.com/directus/directus/security/advisories/...
https://github.com/directus/directus/commit/454cb534d6ffa...

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.