CVE-2021-27583

In Directus 8.x through 8.8.1, an attacker can discover whether a user is present in the database through the password reset feature

published February 23, 2021

CVSS
—
EPSS
1%
Percentile
65.4
In the wild
Unconfirmed
What it is

In Directus 8.x through 8.8.1, an attacker can discover whether a user is present in the database through the password reset feature. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01100 · 65.4th percentile
Published
2021-02-23T18:54Z
EPSS history
Timeline
  • 23 FEB 18:54Z
    In Directus 8.x through 8.8.1, an attacker can discover whether a user is present in the database through the password reset feature
    cvelistv5