CVE-2019-13979

Published July 19th, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

6.8

MEDIUM

Affected

1

PROJECT

Description

In Directus 7 API before 2.2.1, uploading of PHP files is not blocked, leading to uploads/_/originals remote code execution.

directus/v8-archive

Directus Database API — Wraps Custom SQL Databases with a REST/GraphQL API

GitHub

512