CVE-2019-13983 | BDVDB-2026-119397 Detail

Description#

Directus 7 API before 2.2.2 has insufficient anti-automation, as demonstrated by lack of a CAPTCHA in core/Directus/Services/AuthService.php and endpoints/Auth.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/directus/api/issues/991
https://github.com/directus/api/projects/43

Exploit#

No public exploit known

History#

Version 12019-07-19Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.