Lucene search
PRIOn knowledge basePRION:CVE-2019-13984HistoryJul 19, 2019 - 3:15 p.m.
Design/Logic Flaw
2019-07-1915:15:00
PRIOn knowledge base
www.prio-n.com
2
Directus 7 API before 2.3.0 does not validate uploaded files. Regardless of the file extension or MIME type, there is a direct link to each uploaded file, accessible by unauthenticated users, as demonstrated by the EICAR Anti-Virus Test File.
| CPE | Name | Operator | Version |
|---|---|---|---|
| directus_7_api | lt | 2.3.0 |
Related
cve
cve
CVE-2019-13984
2019-07-19 15:15:12
cvelist
cvelist
CVE-2019-13984
2019-07-19 14:17:32
osv
osv
CVE-2019-13984
2019-07-19 15:15:12
nvd
nvd
CVE-2019-13984
2019-07-19 15:15:12