更新: 103 个文件 - 2026-03-18 19:24:37

07-framework-security/cms/directus/INDEX.md

@@ -5,14 +5,14 @@
 - 系统 ID: `directus`
 - 分类: `cms`
 - 覆盖策略: `rolling-24m`
-- 总案例数: `0`
+- 总案例数: `29`
 - 近 30 天新增/更新: `0`
 - 重点 Markdown 案例数: `0`
 - 已实证(真实版本): `0`
 - 已实证(synthetic): `0`
 - 阻塞数: `0`
-- 待人工/缺浏览器证据: `0`
-- 最近渲染时间: `2026-03-18T21:18:14+00:00`
+- 待人工/缺浏览器证据: `29`
+- 最近渲染时间: `2026-03-19T02:23:04+00:00`
 
 ## 目标约束
 
@@ -31,4 +31,35 @@
 
 | 标题 | 严重度 | 案例状态 | 实证状态 | 实证方式 | 来源置信度 | 更新时间 | 案例页 |
 |------|--------|----------|----------|----------|------------|----------|--------|
-| No advisories yet | `n/a` | `empty` | `n/a` | `n/a` | `n/a` | `n/a` | - |
+| Insights | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Open redirect in SAML | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| directus | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Skip to content | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Actions | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Improper Permission Handling on Deleted Fields in Directus | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| 5 | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Projects | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Conceal fields are searchable if read permissions enabled | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Information Leakage: Existing Collections | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| User Enumeration via Password Reset Timing Attack | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| 3 | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Issues 
+           344 | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Security 
+           46 | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Store XSS | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Missing permission checks for manual trigger Flows | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Pull requests 
+           40 | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| 2 | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| directus | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Notifications | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Discussions | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Unauthenticated file upload and file modification due to lacking input sanitization | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| 4 | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Sign up | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| S3 assets become unavailable after a burst of malformed transformations | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Report a vulnerability | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Policy | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Sign in | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Directus version number disclosure | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |