-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability manifests when:
While the exact function name isn't specified in available resources, the core issue exists in the file-serving logic that directly interacts with the 'filename_disk' value. The CWE-755 classification indicates improper exception handling when processing this value, strongly suggesting the vulnerability resides in the code responsible for reading and serving files from disk based on database values. The patch likely added directory checks and proper error handling in this file-serving function.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| directus | npm | < 9.15.0 | 9.15.0 |