Vulnerabilities > CVE-2023-45820 - Improper Handling of Exceptional Conditions vulnerability in Monospace Directus
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
Directus is a real-time API and App dashboard for managing SQL database content. In affected versions any Directus installation that has websockets enabled can be crashed if the websocket server receives an invalid frame. A malicious user could leverage this bug to crash Directus. This issue has been addressed in version 10.6.2. Users are advised to upgrade. Users unable to upgrade should avoid using websockets.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 8 |
Common Weakness Enumeration (CWE)
References
- https://github.com/directus/directus/commit/243eed781b42d6b4948ddb8c3792bcf5b44f55bb
- https://github.com/directus/directus/commit/243eed781b42d6b4948ddb8c3792bcf5b44f55bb
- https://github.com/directus/directus/security/advisories/GHSA-hmgw-9jrg-hf2m
- https://github.com/directus/directus/security/advisories/GHSA-hmgw-9jrg-hf2m