3 matches found
CVE-2019-13983
Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php...
9.8CVSS0.01462EPSS
SaveExploits0References2
PT-2019-13512
Name of the Vulnerable Software and Affected Versions Directus versions prior to 2.2.2 Description The issue is related to insufficient anti-automation measures. Specifically, it is demonstrated by the lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php, which are A...
9.8CVSS0.01462EPSS
SaveExploits0References5
CVE-2019-13983: Missing Authentication for Critical Function
Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php...
9.8CVSS5.7AI score0.01462EPSS
SaveExploits0References2
20