Unauthenticated User Access to Last Authenticated User Credentials via OpenID or OAuth2 Vulnerability

CVE-2024-45596

Summary

The vulnerability in the Directus API and App dashboard allows an unauthenticated user to access the credentials of the last authenticated user through the OpenID or OAuth2 protocol. This occurs because the authentication URL fails to include the redirect query string properly, leading to a situation where user credentials can be inadvertently exposed via the respond middleware, which caches GET requests under certain conditions. As a result, an unauthenticated request may return sensitive user information. The issue has been addressed in versions 10.13.3 and 11.1.0.

References