What is GHSA-4hmq-ggrm-qfc6?

GHSA-4hmq-ggrm-qfc6 is a security advisory published by GitHub Security Advisories with High severity. directus vulnerable to HTML Injection in Password Reset email to custom Reset URL

Which CVE IDs does GHSA-4hmq-ggrm-qfc6 cover?

GHSA-4hmq-ggrm-qfc6 covers the following CVE IDs: CVE-2023-27474. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4hmq-ggrm-qfc6?

GHSA-4hmq-ggrm-qfc6 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-4hmq-ggrm-qfc6?

GHSA-4hmq-ggrm-qfc6 affects 1 product, including: npm/directus:\u003c 9.23.0.

GHSA-4hmq-ggrm-qfc6HighCVSS 7.5

directus vulnerable to HTML Injection in Password Reset email to custom Reset URL

Vendor

GitHub Security Advisories

Published

March 7, 2023

Last Modified

March 7, 2023

🔗 CVE IDs covered (1)

CVE-2023-27474 →

📋 Description

Impact

Instances relying on an allow-listed reset URL are vulnerable to an HTML injection attack through the use of query parameters in the reset URL.

Patches

The problem has been resolved and released under version 9.23.0. People relying on a custom password reset URL should upgrade to 9.23.0 or later, or remove the custom reset url from the configured allow list.

Workarounds

Disable the custom reset URL allow list.

🎯 Affected products1

npm/directus:< 9.23.0

🔗 References (5)

https://github.com/directus/directus/security/advisories/GHSA-4hmq-ggrm-qfc6
https://nvd.nist.gov/vuln/detail/CVE-2023-27474
https://github.com/directus/directus/issues/17119
https://github.com/directus/directus/pull/17120
https://github.com/advisories/GHSA-4hmq-ggrm-qfc6