Description
In Directus 7 API through 2.3.0, uploading of PHP files is blocked only when the Apache HTTP Server is used, leading to uploads/_/originals remote code execution with nginx.
Unscored
CVE-2019-13980
EUVD-2019-5242GHSA-gv4c-p6cq-75ph
In Directus 7 API through 2.3.0, uploading of PHP files is blocked only when the Apache HTTP Server is used, leading to uploads/_/originals…
Published Jul 19, 2019 · Updated Aug 5, 2024 · Assigned by mitre