CVE-2024-3584

qdrant/qdrant version 1.9.0-dev is vulnerable to path traversal due to improper input validation in the "/collections/name/snapshots/upload" endpoint. By manipulating the "name" parameter through URL encoding, an attacker can upload a file to an arbitrary location on the system, such as...