漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Path Traversal in qdrant/qdrant
Vulnerability Description
qdrant/qdrant version 1.9.0-dev is vulnerable to path traversal due to improper input validation in the `/collections/{name}/snapshots/upload` endpoint. By manipulating the `name` parameter through URL encoding, an attacker can upload a file to an arbitrary location on the system, such as `/root/poc.txt`. This vulnerability allows for the writing and overwriting of arbitrary files on the server, potentially leading to a full takeover of the system. The issue is fixed in version 1.9.0.
CVSS Information
N/A
Vulnerability Type
输入验证不恰当
Vulnerability Title
Qdrant 输入验证错误漏洞
Vulnerability Description
Qdrant是一个矢量相似性搜索引擎和矢量数据库。 Qdrant 1.9.0之前版本存在输入验证错误漏洞，该漏洞源于 /collections/{name}/snapshots/upload 端点输入验证不当，攻击者利用该漏洞可以在服务器上写入和覆盖任意文件，导致系统完全被接管。
CVSS Information
N/A
Vulnerability Type
N/A