CVE-2025-64747

A stored cross-site scripting (XSS) vulnerability exists that allows users with upload files and edit item permissions to inject malicious JavaScript through the Block Editor interface. Attackers can bypass Content Security Policy (CSP) restrictions by combining file uploads with iframe srcdoc attributes, resulting in persistent XSS execution.

Details

The vulnerability arises from insufficient sanitization in the Block Editor interface when processing JSON content containing HTML elements. The attack requires two permissions:

• upload files - To upload malicious JavaScript files
• edit item - To create or modify content with the Block Editor

Attack Vector:

1. JavaScript File Upload: Attackers upload a malicious JavaScript file via the files endpoint, obtaining a file ID accessible through the assets directory

2. Block Editor Exploitation: Using a JSON field with Block Editor interface, attackers inject raw HTML containing an iframe with srcdoc attribute that references the uploaded file

3. CSP Bypass: The iframe srcdoc technique circumvents existing CSP protections by creating a new document context that loads the uploaded script

The payload is injected through direct API manipulation (PATCH request) to bypass client-side validation, targeting the Block Editor's paragraph data structure within the JSON content field.

This vulnerability enables:

• Persistent XSS - Malicious scripts execute whenever affected content is viewed
• Session hijacking - Access to authentication tokens and cookies of users viewing the content
• Administrative compromise - If administrators view infected content, their elevated privileges can be exploited
• CSP bypass - Demonstrates ineffective security controls, potentially affecting other protections
• Data exfiltration - Ability to steal sensitive information displayed in the application
• Phishing attacks - Injection of convincing fake login forms or malicious redirects

The application does not adequately validate input before processing it, allowing unexpected values to reach sensitive code paths. Typical impact: varies by context: data corruption, logic bypass, or denial of service.

CVE-2025-64747 has a CVSS score of 5.5 (Medium). The vector is network-reachable, low privileges required, and user interaction required. A CVSS score reflects the worst-case severity of the vulnerability, not your specific exposure. Whether this affects your application depends on whether the vulnerable code is present and reachable in your environment. A fixed version is available (11.13.0); upgrading removes the vulnerable code path.

Kodem intelligence

1. What is CVE-2025-64747? CVE-2025-64747 is a medium-severity improper input validation vulnerability in directus (npm), affecting versions < 11.13.0. It is fixed in 11.13.0. The application does not adequately validate input before processing it, allowing unexpected values to reach sensitive code paths.
2. How severe is CVE-2025-64747? CVE-2025-64747 has a CVSS score of 5.5 (Medium). This score reflects the worst-case severity of the vulnerability, not your specific exposure. Whether it represents real risk in your environment depends on whether the vulnerable code is present and reachable.
3. Which versions of directus are affected by CVE-2025-64747? directus (npm) versions < 11.13.0 is affected.
4. Is there a fix for CVE-2025-64747? Yes. CVE-2025-64747 is fixed in 11.13.0. Upgrade to this version or later.
5. Is CVE-2025-64747 exploitable, and should I be worried? Whether CVE-2025-64747 is exploitable in your environment depends on whether the vulnerable code is present and reachable. A CVSS score is a worst-case rating; it does not account for your specific deployment, configuration, or usage patterns. Kodem, an Intelligent Application Security platform, uses runtime intelligence to show which vulnerabilities actually execute in production, so you can focus on the ones that represent real risk. Get a demo
6. What actually determines whether CVE-2025-64747 is exploitable, and how bad it is? Exploitability and impact are not fixed properties of a CVE. They depend on runtime truth: whether the vulnerable code is present, reachable, and actually executes in your application. A high CVSS score on a dependency that never runs is not the same as real risk. Kodem, an Intelligent Application Security platform, uses runtime intelligence to reveal which vulnerabilities actually execute in production, so teams prioritize the ones that genuinely matter.
7. How do I fix CVE-2025-64747? Upgrade directus to 11.13.0 or later.