Description
Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.12.0 and prior to version 11.5.0, when a Flow with the "Webhook" trigger and the "Data of Last Operation" response body encounters a ValidationError thrown by a failed condition operation, the API response includes sensitive data. This includes environmental variables, sensitive API keys, user accountability information, and operational data. This issue poses a significant security risk, as any unintended exposure of this data could lead to potential misuse. Version 11.5.0 fixes the issue.
INFO
Published Date :
2025-03-26T17:26:51.803Z
Last Modified :
2025-03-26T17:44:22.290Z
Source :
GitHub_M
AFFECTED PRODUCTS
The following products are affected by CVE-2025-30353 vulnerability.
| Vendors | Products |
|---|---|
| Directus |
|
| Monospace |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-30353.
