Lucene search
Veracode Vulnerability DatabaseVERACODE:39969HistoryMar 28, 2023 - 5:26 a.m.
Information Disclosore
2023-03-2805:26:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
directus
vulnerability
logger.ts
information disclosure
sensitive information
EPSS
0
Percentile
15.5%
directus is vulnerable to Information Disclosure. The vulnerability exists due to pinoHTTP in logger.ts because the directus_refresh_token is not properly redacted which allows an attacker to gain sensitive information through the log files.
Related
nvd
nvd
CVE-2023-28443
2023-03-24 00:15:15
cve
cve
CVE-2023-28443
2023-03-24 00:15:15
prion
prion
Code injection
2023-03-24 00:15:00
cvelist
cvelist
github
github
directus vulnerable to Insertion of Sensitive Information into Log File
2023-03-23 19:47:12
osv
osv
CVE-2023-28443
2023-03-24 00:15:15
directus vulnerable to Insertion of Sensitive Information into Log File
2023-03-23 19:47:12