Files
CVEs-PoC/2021/CVE-2021-26594.md
T
2025-09-29 21:09:30 +02:00

694 B

CVE-2021-26594

Description

In Directus 8.x through 8.8.1, an attacker can switch to the administrator role (via the PATCH method) without any control by the back end. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

POC

Reference

No PoCs from references.

Github