Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directus 7 API before 2.3.0 does not validate uploaded files. Regardless of the file extension or MIME type, there is a direct link to each uploaded file, accessible by unauthenticated users, as demonstrated by the EICAR Anti-Virus Test File.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
RANGER Studio Directus 代码问题漏洞
Vulnerability Description
RANGER Studio Directus是美国RANGER Studio公司的一套开源的用于管理自定义数据库的开源无头CMS和API。Directus API是其中的一个能够将RESTful API层添加到新的或现有SQL数据库的组件。 RANGER Studio Directus 7版本中的API 2.3.0之前版本存在安全漏洞，该漏洞源于程序没有验证上传的文件。攻击者可利用该漏洞上传恶意的文件。
CVSS Information
N/A
Vulnerability Type
N/A