Authentication flaw

2019-07-1915:15:00

PRIOn knowledge base

www.prio-n.com

9.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.8%

JSON

Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php.

CPENameOperatorVersion
directus_7_apilt2.2.2

CPE	Name	Operator	Version
	directus_7_api	lt	2.2.2

References

github.com/directus/api/issues/991

github.com/directus/api/projects/43