CVE-2019-13983

2019-07-1914:17:42

mitre

www.cve.org

9.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.8%

JSON

Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php.

References

github.com/directus/api/issues/991

github.com/directus/api/projects/43