Directus 7 Api Security Vulnerabilities - CVSS Score 9 - 10

cve

CVE-2019-13983

Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php.

9.8CVSS

9.4AI Score

0.002EPSS

2019-07-19 03:15 PM