Security Advisory
CVE-2019-13980
8.8
HIGH
Vulnerability Description
In Directus 7 API through 2.3.0, uploading of PHP files is blocked only when the Apache HTTP Server is used, leading to uploads/_/originals remote code execution with nginx.
Published Date
July 19, 2019
Official Source
NIST NVD Advisory