更新: 103 个文件 - 2026-03-18 19:24:37

07-framework-security/cms/strapi/INDEX.md

@@ -5,14 +5,14 @@
 - 系统 ID: `strapi`
 - 分类: `cms`
 - 覆盖策略: `rolling-24m`
-- 总案例数: `0`
+- 总案例数: `26`
 - 近 30 天新增/更新: `0`
 - 重点 Markdown 案例数: `0`
 - 已实证(真实版本): `0`
 - 已实证(synthetic): `0`
 - 阻塞数: `0`
-- 待人工/缺浏览器证据: `0`
-- 最近渲染时间: `2026-03-18T21:18:14+00:00`
+- 待人工/缺浏览器证据: `26`
+- 最近渲染时间: `2026-03-19T02:23:04+00:00`
 
 ## 目标约束
 
@@ -31,4 +31,33 @@
 
 | 标题 | 严重度 | 案例状态 | 实证状态 | 实证方式 | 来源置信度 | 更新时间 | 案例页 |
 |------|--------|----------|----------|----------|------------|----------|--------|
-| No advisories yet | `n/a` | `empty` | `n/a` | `n/a` | `n/a` | `n/a` | - |
+| Skip to content | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Security 
+           16 | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Pull requests 
+           214 | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Sign in | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Unauthorized Access to Private Fields via parms.lookup | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Weak Password Length Validation | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Insights | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Server - Side Request Forgery in Webhook function | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Leaking data via relations via the Admin Panel | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| 3rd party token leak and authentication bypass | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Denial-of-Service via Improper Exception Handling | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Actions | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Star
+            71.6k | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Sign up | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Unauthorized Access to Private Fields in User Registration API | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Issues 
+           573 | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Policy | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Leaking sensitive user information, user reset password, tokens via content-manager views | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Next | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Field level permissions not being respected in  relationship title | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Discussions | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| strapi | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| CORS Misconfiguration Leads to Sensitive Data Exposure | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Projects | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| Report a vulnerability | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |
+| strapi | `unknown` | `triage` | `triage-manual` | `synthetic` | `official` | `` | - |