yun2025 发表于 前天 17:34

外资加码中国新赛道 高技术产业引资占比超四成

外资加码中国新赛道 高技术产业引资占比超四成

Kendo UI for Vue:网页编辑器插入的链接可能在他人浏览器执行脚本

11月7日公开的漏洞记录CVE-2026-106143涉及Kendo UI for Vue。Vue组件允许用户向编辑器内容插入链接或图像。如果一名低权限内容提交者提供的地址未被安全处理,其他使用者之后点击生成的链接时,浏览器可能运行非预期脚本。公告将相关问题定位到具体编辑组件和一段连续的版本范围。版本清单标出的受影响范围包括2.7.1起至10.1.0之前。

这条记录给出的CVSS 3.1基础评分为5.4分,分级为中危。按照评分列出的条件,利用者可通过网络接触相关功能,需要已有低权限账户或相当的访问权,并且需要其他用户参与触发。数据保密性、内容完整性和服务可用性三项的影响等级分别为低、低、无。评分把利用复杂度列为较低,所反映的是触发这一缺陷需要满足的技术条件。

https://lightroom.adobe.com/shares/08619dbe7c62e94a965102703bfb4cd7
https://lightroom.adobe.com/shares/c7bf0f0fb45e5e4c8d2aa04db73c03fe
https://lightroom.adobe.com/shares/a5b3d39a1a3ee247bc82c920c0739f13
https://lightroom.adobe.com/shares/90ce143fc1e9b04d8043f9ae2e311bd0
https://lightroom.adobe.com/shares/1a9ea4d058858148998cee31fbd6a2d4
https://lightroom.adobe.com/shares/8fb87e0deced0442a669947625d5ac91
https://lightroom.adobe.com/shares/646e2dbbd173684e929a19d296b2bdab
https://lightroom.adobe.com/shares/a5e75197f97ab744892a9c934f122741
https://lightroom.adobe.com/shares/a12adcc2170b284ebcf5b1e677e9c288
https://lightroom.adobe.com/shares/0de5c3af6d643540bd82a7e796393519
https://lightroom.adobe.com/shares/fa102c9e1525094f9342e6b4899ca038
https://lightroom.adobe.com/shares/f8a22957154f394089c855d7142d5987
https://lightroom.adobe.com/shares/6bc4e08f7e89c947bc6bb3139e13dcdb
https://lightroom.adobe.com/shares/8b02d2ee420a144e8c5908085e24641c
https://lightroom.adobe.com/shares/c5c1df190343bc4598850ec4f4238550
https://lightroom.adobe.com/shares/7661de8234fc3a4998ca563f9c23f214
https://lightroom.adobe.com/shares/246d7b7e9c61c844b0ea841cc09c1b2b
https://lightroom.adobe.com/shares/ce32e4a9b591b842a711eb7f68745348
https://lightroom.adobe.com/shares/7df173aa8fa314478bc090ca0112e200
https://lightroom.adobe.com/shares/eff6fae7ab0f70409eea307d9bf765b4
https://lightroom.adobe.com/shares/c11b32c0094ba14a9a3419acea6c529c
https://lightroom.adobe.com/shares/9110cf329cedb74ba20eb730fa860159
https://lightroom.adobe.com/shares/90b18c7790dc254aa328c30660e7c524
https://lightroom.adobe.com/shares/acb31b0694a1524d944ef3f9ab7d38e2
https://lightroom.adobe.com/shares/15850b84f5fb134c95dfd0375edf046a
https://lightroom.adobe.com/shares/475cb887343cb3478e2e642163d93b84
https://lightroom.adobe.com/shares/435d05fc4fab2f4c88fbbf56f1eb2a27
https://lightroom.adobe.com/shares/352e5d09bd84244ba94b6730f49f2e3f
https://lightroom.adobe.com/shares/db7313eea71e844093c93d5640762a09
https://lightroom.adobe.com/shares/9dac0550b394a7489f35e44d860b3642
https://lightroom.adobe.com/shares/5b1b826b597ac4468c25700dbe946bc7
https://lightroom.adobe.com/shares/acb8b8e5ce474d4d99f7b389d64672e0
https://lightroom.adobe.com/shares/6ea73187bc60df478c0392b1e0a4f543
https://lightroom.adobe.com/shares/3d31c6408a216244aa3ea9835591bf41
https://lightroom.adobe.com/shares/7a41b69a1c64bd4ba7464ab361ac9af9
https://lightroom.adobe.com/shares/ff9ee22f3ace8b4f8df5a9817b0d9520
https://lightroom.adobe.com/shares/47f4579ba9fcce41852c607b1b032d06
https://lightroom.adobe.com/shares/70b98f2586ef2d409a15ff1678755501
https://lightroom.adobe.com/shares/7cf8645ac064f948bac6491af6b865ce
https://lightroom.adobe.com/shares/d60a3984beaa87458c4f5445ca7f45ee
https://lightroom.adobe.com/shares/eaa04dcb4d19f64cb0f41cb89cc89406
https://lightroom.adobe.com/shares/0638d9f7f8722440aa69e9edc1205bb3
https://lightroom.adobe.com/shares/5f2c069b89cdc5438227d4640579ee7d
https://lightroom.adobe.com/shares/a70802ad12fc3a41a1f9279facdda2b1
https://lightroom.adobe.com/shares/fa0db11c8a610e469e49f0dd00132694
https://lightroom.adobe.com/shares/edd3f5d9e5f9a04a80994a8c1037de4d
https://lightroom.adobe.com/shares/3e942cb02f3b7d49bb560411eca64261
https://lightroom.adobe.com/shares/b829f879e8e6b942bb72a832280b636a
https://lightroom.adobe.com/shares/87477041b61168469270221719bf9075
https://lightroom.adobe.com/shares/d2f57f56736a1942ada80572e91ae85d

奥拉基尔 发表于 前天 17:36

路过,支持一下啦
页: [1]
查看完整版本: 外资加码中国新赛道 高技术产业引资占比超四成