CVE-2019-13983

2019-07-1915:15:12

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.8%

JSON

Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php.

References

github.com/directus/api/issues/991

github.com/directus/api/projects/43