CVE-2019-13983

2019-07-1914:17:42

mitre

www.cve.org

AI Score

9.5

Confidence

High

EPSS

0.002

Percentile

61.8%

JSON

Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php.

References

github.com/directus/api/issues/991

github.com/directus/api/projects/43