CVE-2023-45820
published 2023-10-19CVE-2023-45820: Directus is a real-time API and App dashboard for managing SQL database content. In affected versions any Directus installation that has websockets enabled can…
PriorityP434medium6.5CVSS 3.1
AVNACLPRLUINSUCNINAH
EPSS
0.69%
48.1th percentile
Directus is a real-time API and App dashboard for managing SQL database content. In affected versions any Directus installation that has websockets enabled can be crashed if the websocket server receives an invalid frame. A malicious user could leverage this bug to crash Directus. This issue has been addressed in version 10.6.2. Users are advised to upgrade. Users unable to upgrade should avoid using websockets.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| directus | directus | — | — |
| directus | directus | >= 10.4.0 < 10.6.2 | 10.6.2 |
| monospace | directus | >= 10.4.0 < 10.6.2 | 10.6.2 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Directus crashes on invalid WebSocket message
osv·2023-10-19
CVE-2023-45820 [HIGH] Directus crashes on invalid WebSocket message
Directus crashes on invalid WebSocket message
### Summary
It seems that any Directus installation that has websockets enabled can be crashed if the websocket server receives an invalid frame. This could probably be posted as an issue and I might even be able to put together a pull request for a fix (if only I had some extra time...), but I decided to instead post as a vulnerability just for the maintainers, since this seemingly can be used to crash any live Directus server if websockets are enabled, so public disclosure is not a good idea until the issue is fixed.
### Details
The fix for this seems quite simple; the websocket server just needs to properly catch the error instead of crashing the server. See for example: https://github.com/websockets/ws/issues/2098
### PoC
- Start a fresh
GHSA
Directus crashes on invalid WebSocket message
ghsa·2023-10-19
CVE-2023-45820 [HIGH] CWE-755 Directus crashes on invalid WebSocket message
Directus crashes on invalid WebSocket message
### Summary
It seems that any Directus installation that has websockets enabled can be crashed if the websocket server receives an invalid frame. This could probably be posted as an issue and I might even be able to put together a pull request for a fix (if only I had some extra time...), but I decided to instead post as a vulnerability just for the maintainers, since this seemingly can be used to crash any live Directus server if websockets are enabled, so public disclosure is not a good idea until the issue is fixed.
### Details
The fix for this seems quite simple; the websocket server just needs to properly catch the error instead of crashing the server. See for example: https://github.com/websockets/ws/issues/2098
### PoC
- Start a fresh
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/directus/directus/commit/243eed781b42d6b4948ddb8c3792bcf5b44f55bbhttps://github.com/directus/directus/security/advisories/GHSA-hmgw-9jrg-hf2mhttps://github.com/directus/directus/commit/243eed781b42d6b4948ddb8c3792bcf5b44f55bbhttps://github.com/directus/directus/security/advisories/GHSA-hmgw-9jrg-hf2m
2023-10-19
Published