CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-29641

Directus 8 before 8.8.2 allows remote authenticated users to execute arbitrary code because file-upload permissions include the ability to upload a .php file to the main upload directory and/or upload a .php file and a .htaccess file to a subdirectory. Exploitation succeeds only for certain installations with the Apache HTTP Server and the local-storage driver (e.g., when the product was obtained from hub.docker.com).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.057

EPSS Ranking 89.9%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.5

References

Products affected by CVE-2021-29641

Rangerstudio » Directus » Version: 8.0.0

cpe:2.3:a:rangerstudio:directus:8.0.0
Rangerstudio » Directus » Version: 8.0.1

cpe:2.3:a:rangerstudio:directus:8.0.1
Rangerstudio » Directus » Version: 8.0.2

cpe:2.3:a:rangerstudio:directus:8.0.2
Rangerstudio » Directus » Version: 8.1.0

cpe:2.3:a:rangerstudio:directus:8.1.0
Rangerstudio » Directus » Version: 8.2.0

cpe:2.3:a:rangerstudio:directus:8.2.0
Rangerstudio » Directus » Version: 8.3.0

cpe:2.3:a:rangerstudio:directus:8.3.0
Rangerstudio » Directus » Version: 8.3.1

cpe:2.3:a:rangerstudio:directus:8.3.1
Rangerstudio » Directus » Version: 8.4.0

cpe:2.3:a:rangerstudio:directus:8.4.0
Rangerstudio » Directus » Version: 8.5.0

cpe:2.3:a:rangerstudio:directus:8.5.0
Rangerstudio » Directus » Version: 8.5.1

cpe:2.3:a:rangerstudio:directus:8.5.1
Rangerstudio » Directus » Version: 8.5.2

cpe:2.3:a:rangerstudio:directus:8.5.2
Rangerstudio » Directus » Version: 8.5.3

cpe:2.3:a:rangerstudio:directus:8.5.3
Rangerstudio » Directus » Version: 8.5.4

cpe:2.3:a:rangerstudio:directus:8.5.4
Rangerstudio » Directus » Version: 8.5.5

cpe:2.3:a:rangerstudio:directus:8.5.5
Rangerstudio » Directus » Version: 8.6.0

cpe:2.3:a:rangerstudio:directus:8.6.0
Rangerstudio » Directus » Version: 8.6.1

cpe:2.3:a:rangerstudio:directus:8.6.1
Rangerstudio » Directus » Version: 8.6.2

cpe:2.3:a:rangerstudio:directus:8.6.2
Rangerstudio » Directus » Version: 8.7.0

cpe:2.3:a:rangerstudio:directus:8.7.0
Rangerstudio » Directus » Version: 8.7.1

cpe:2.3:a:rangerstudio:directus:8.7.1
Rangerstudio » Directus » Version: 8.7.2

cpe:2.3:a:rangerstudio:directus:8.7.2
Rangerstudio » Directus » Version: 8.8.0

cpe:2.3:a:rangerstudio:directus:8.8.0
Rangerstudio » Directus » Version: 8.8.1

cpe:2.3:a:rangerstudio:directus:8.8.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-29641

Products

Pricing

Contact Us