CVE-2024-28238

Summary

CVE-2024-28238 is a vulnerability affecting Directus, a real-time API and App dashboard for managing SQL database content. The issue lies in the transmission of JSON Web Tokens (JWTs) via GET requests on the /files page. These tokens, which are included in the URLs, pose a security risk as they may be logged in various places such as web server logs and browser history. Attackers gaining access to these logs can hijack active user sessions, resulting in unauthorized access to sensitive information or actions on behalf of the user. Directus has released version 10.10.0 to address this vulnerability, and users are strongly advised to upgrade. There are currently no known workarounds for this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.