Description

An issue found in Directus API v.2.2.0 allows a remote attacker to cause a denial of service via a great amount of HTTP requests.

Remediation

References

https://github.com/directus/api/issues/982

Related Vulnerabilities

CVE-2021-21162 Vulnerability in maven package org.webjars.npm:electron

CVE-2020-5397 Vulnerability in maven package org.springframework:spring-webflux

CVE-2021-44684 Vulnerability in npm package github-todos

CVE-2022-23463 Vulnerability in maven package com.nepxion:discovery-commons

CVE-2020-13822 Vulnerability in npm package elliptic

Severity

High

Classification

CWE-400 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Tags

Exploit Patch