Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Directus 7 API before 2.2.1, uploading of PHP files is not blocked, leading to uploads/_/originals remote code execution.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RANGER Studio Directus 代码问题漏洞
Vulnerability Description
RANGER Studio Directus是美国RANGER Studio公司的一套开源的用于管理自定义数据库的开源无头CMS和API。Directus API是其中的一个能够将RESTful API层添加到新的或现有SQL数据库的组件。 RANGER Studio Directus 7版本中的API 2.2.1之前版本存在安全漏洞，该漏洞源于程序没有阻断PHP文件的上传。攻击者可利用该漏洞执行代码。
CVSS Information
N/A
Vulnerability Type
N/A