CVE-2023-28443
published 2023-03-24CVE-2023-28443: Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 9.23.3, the `directus_refresh_token` is not redacted properly…
PriorityP426medium5.5CVSS 3.1
AVLACLPRLUINSUCHINAN
EPSS
0.31%
22.8th percentile
Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 9.23.3, the `directus_refresh_token` is not redacted properly from the log outputs and can be used to impersonate users without their permission. This issue is patched in version 9.23.3.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| directus | directus | < 9.23.3 | 9.23.3 |
| directus | directus | >= 0 < 9.23.3 | 9.23.3 |
| monospace | directus | < 9.23.3 | 9.23.3 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
directus vulnerable to Insertion of Sensitive Information into Log File
ghsa·2023-03-23
CVE-2023-28443 [MEDIUM] CWE-284 directus vulnerable to Insertion of Sensitive Information into Log File
directus vulnerable to Insertion of Sensitive Information into Log File
### Summary
CWE-532: Insertion of Sensitive Information into Log File discovered in v9.23.1. The `directus_refresh_token` is not redacted properly from the log outputs and can be used to impersonate users without their permission.
### Details
Using `v9.23.1`, I am seeing that the `directus_refresh_token` is not properly redacted as indicated by https://github.com/directus/directus/blob/7c479c5161639aac466c763b6b958a9524201d74/api/src/logger.ts#L13
I'm classifying this as a security vulnerability because if someone has access to the log outputs, for example with a shared Cloud account or Splunk implementation, they could exchange the refresh token using `/auth/refresh` for an access token and use the token to perfo
OSV
directus vulnerable to Insertion of Sensitive Information into Log File
osv·2023-03-23
CVE-2023-28443 [MEDIUM] directus vulnerable to Insertion of Sensitive Information into Log File
directus vulnerable to Insertion of Sensitive Information into Log File
### Summary
CWE-532: Insertion of Sensitive Information into Log File discovered in v9.23.1. The `directus_refresh_token` is not redacted properly from the log outputs and can be used to impersonate users without their permission.
### Details
Using `v9.23.1`, I am seeing that the `directus_refresh_token` is not properly redacted as indicated by https://github.com/directus/directus/blob/7c479c5161639aac466c763b6b958a9524201d74/api/src/logger.ts#L13
I'm classifying this as a security vulnerability because if someone has access to the log outputs, for example with a shared Cloud account or Splunk implementation, they could exchange the refresh token using `/auth/refresh` for an access token and use the token to perfo
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/directus/directus/blob/7c479c5161639aac466c763b6b958a9524201d74/api/src/logger.ts#L13https://github.com/directus/directus/commit/349536303983ccba68ecb3e4fb35315424011afchttps://github.com/directus/directus/security/advisories/GHSA-8vg2-wf3q-mwv7https://github.com/directus/directus/blob/7c479c5161639aac466c763b6b958a9524201d74/api/src/logger.ts#L13https://github.com/directus/directus/commit/349536303983ccba68ecb3e4fb35315424011afchttps://github.com/directus/directus/security/advisories/GHSA-8vg2-wf3q-mwv7
2023-03-24
Published