{"id":"EUVD-2025-177193","revision":"146357c67464453691601f0e28e05979","records":[{"revision":"146357c67464453691601f0e28e05979","observedAt":"2026-11-01T01:13:37.78+00:00","statement":{"source":"euvd","id":"EUVD-2025-177193","aliases":["CVE-2025-64748","GHSA-8jpw-gpr4-8cmh","MAL-2025-188687"],"title":"Directus is a real-time API and App dashboard for managing SQL database content. A vulnerability in versions prior to 11.13.0 allows authenticated users to search concealed/sensitive fields when they have read permissions. While actual valu…","description":"Directus is a real-time API and App dashboard for managing SQL database content. A vulnerability in versions prior to 11.13.0 allows authenticated users to search concealed/sensitive fields when they have read permissions. While actual values remain masked (`****`), successful matches can be detected through returned records, enabling enumeration attacks on sensitive data. Version 11.13.0 fixes the issue.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","score":6.5,"severity":null}],"references":["https://github.com/directus/directus/security/advisories/GHSA-8jpw-gpr4-8cmh","https://github.com/directus/directus/commit/7737d56e096f95edfbdf861a3c08999ad31ce204"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-177193","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Nov 13, 2025, 9:29:44 PM","dateUpdated":"Nov 13, 2025, 9:39:43 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-177193","identifiers":["EUVD-2025-177193","CVE-2025-64748","GHSA-8jpw-gpr4-8cmh","MAL-2025-188687"]},"retained":false,"historicalAffected":[]}],"coverage":[]}