Lucene search
+L

3 matches found

OSV
OSV
added 2024/03/01 4:58 p.m.20 views

GHSA-QW9G-7549-7WG5 Directus has MySQL accent insensitive email matching

Password reset vulnerable to accent confusion The password reset mechanism of the Directus backend is implemented in a way where combined with specific, need to double check if i can work around configuration in MySQL or MariaDB. As such, it allows attackers to receive a password reset email of a...

8.2CVSS8.1AI score0.00702EPSS
SaveExploits1References6
Rows per page
Query Builder