Lucene search
GoogleOSV:CVE-2019-13984HistoryJul 19, 2019 - 3:15 p.m.
CVE-2019-13984
2019-07-1915:15:12
Google
osv.dev
3
Directus 7 API before 2.3.0 does not validate uploaded files. Regardless of the file extension or MIME type, there is a direct link to each uploaded file, accessible by unauthenticated users, as demonstrated by the EICAR Anti-Virus Test File.
| CPE | Name | Operator | Version |
|---|---|---|---|
| api | eq | 2.0.0-beta.1 | |
| api | eq | 2.0.0-alpha.1 |
Related
cve
cve
CVE-2019-13984
2019-07-19 15:15:12
cvelist
cvelist
CVE-2019-13984
2019-07-19 14:17:32
nvd
nvd
CVE-2019-13984
2019-07-19 15:15:12
prion
prion
Design/Logic Flaw
2019-07-19 15:15:00