CVE-2019-13983

2019-07-1915:15:12

Google

osv.dev

AI Score

6.9

Confidence

High

EPSS

0.002

Percentile

61.8%

JSON

Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php.

References

github.com/directus/api/issues/991

github.com/directus/api/projects/43