Lucene search
GoogleOSV:CVE-2019-13981HistoryJul 19, 2019 - 3:15 p.m.
CVE-2019-13981
2019-07-1915:15:12
Google
osv.dev
5
In Directus 7 API through 2.3.0, remote attackers can read image files via a direct request for a filename under the uploads/_/originals/ directory. This is related to a configuration option in which the file collection can be non-public, but this option does not apply to the thumbnailer.
| CPE | Name | Operator | Version |
|---|---|---|---|
| api | eq | 2.0.0-beta.1 | |
| api | eq | 2.0.0-alpha.1 | |
| api | eq | 2.3.0 |
Related
prion
prion
Design/Logic Flaw
2019-07-19 15:15:00
cve
cve
CVE-2019-13981
2019-07-19 15:15:12
cvelist
cvelist
CVE-2019-13981
2019-07-19 14:17:58
nvd
nvd
CVE-2019-13981
2019-07-19 15:15:12