CVE-2021-27583

Name of the Vulnerable Software and Affected Versions Directus versions 8.x through 8.8.1

Description An attacker can discover whether a user is present in the database through the password reset feature. This issue only affects products that are no longer supported by the maintainer.

Recommendations For versions 8.x through 8.8.1, as a temporary workaround, consider disabling the password reset feature until a patch is available. However, since these versions are no longer supported, it is recommended to upgrade to a supported version if possible. At the moment, there is no information about a newer version that contains a fix for this vulnerability.