中国矿业大学成立钱学森学院
中国矿业大学成立钱学森学院Kroki：绘图后端安全模式未覆盖全部文件读取操作
11月7日公开的漏洞记录CVE-2026-102359涉及Kroki。Kroki可将文字描述转换成图形。处理TikZ图表时，特定安全检查只拦截了一种文件读取方式，排版引擎还有其他读取操作可用。向绘图接口提交的内容因此可能接触服务器上的文件，即使部署者已经启用了预期用于隔离输入的安全模式。版本清单标出的受影响范围包括低于0.31.2。
这条记录给出的CVSS 3.1基础评分为7.5分，分级为高危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、无、无。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。
https://lightroom.adobe.com/shares/94c56ec4a970ef42913af3c89af3e4ea
https://lightroom.adobe.com/shares/ca08d9e7458a3541b791780c6509d6d0
https://lightroom.adobe.com/shares/6b7d432058582f4a820df37c67b96ce7
https://lightroom.adobe.com/shares/b3d17b8b4162774e980f674917012d06
https://lightroom.adobe.com/shares/69c80097f301d1459151808566121f76
https://lightroom.adobe.com/shares/9c7f9a6c27f228429a029cdb6ce1da4c
https://lightroom.adobe.com/shares/8be3e288c5a26f4d8401c6cb0014a3b2
https://lightroom.adobe.com/shares/3ca63fc5ebb6004bbf7a46997fa38d84
https://lightroom.adobe.com/shares/996cc95452a85c4db833d47874133597
https://lightroom.adobe.com/shares/1d336c8f76ca864f87d5db747de159e3
https://lightroom.adobe.com/shares/43cd9771c97ded4894590ce8db495472
https://lightroom.adobe.com/shares/235dec2f75b09246beb28eb11a91d0aa
https://lightroom.adobe.com/shares/3ff0beaef9808f4cae7ce2c40fb024b8
https://lightroom.adobe.com/shares/802102b8a267f54d9e063f574849d2a8
https://lightroom.adobe.com/shares/490eb932194ff44e965327c39328d1c3
https://lightroom.adobe.com/shares/317b0974e0148745b0d730dcc9f624c0
https://lightroom.adobe.com/shares/e1e818845efc6f45a79d98099f10a321
https://lightroom.adobe.com/shares/1c6d8a0ecec88b439b55f3647601aa09
https://lightroom.adobe.com/shares/0258654fa18335449164bd573aff9825
https://lightroom.adobe.com/shares/434c26b2b4d65f4db6d47b3c349a9762
https://lightroom.adobe.com/shares/2c265402bfa2ee4296cb30a02fedb29e
https://lightroom.adobe.com/shares/61695f214a1ac44cb3fef2ad0a96d202
https://lightroom.adobe.com/shares/7afdc278471d344e90ad04937f705c96
https://lightroom.adobe.com/shares/22f6b7882587cb43b6baa79568725348
https://lightroom.adobe.com/shares/abfbaf4d946b0244a696e2202ed2fe9e
https://lightroom.adobe.com/shares/b53222b9af9b5640a9479cc19c8f8398
https://lightroom.adobe.com/shares/73591f161d58364c8c4ff846d03430dd
https://lightroom.adobe.com/shares/9b06504b7950ba41a1afcf45aa96688d
https://lightroom.adobe.com/shares/98d08a13dece49408abe0cfe3ef05569
https://lightroom.adobe.com/shares/36b452c549fd3d41a15d7ae5124a0732
https://lightroom.adobe.com/shares/ee1ae1ce41ee8a4abbaabbf7126cc4fe
https://lightroom.adobe.com/shares/c507d0b298799648a6cef935a49f3778
https://lightroom.adobe.com/shares/3538e385cfa8524aa017900086394543
https://lightroom.adobe.com/shares/d192924cb3de6f40a4dbf8d7031b8dcd
https://lightroom.adobe.com/shares/91e72b79a5f79f428bbcbff4a8a370e6
https://lightroom.adobe.com/shares/1aafa747fa6d9342b7b8402d8e77a846
https://lightroom.adobe.com/shares/78e67a20fb050646a75aac9db4ed3d6d
https://lightroom.adobe.com/shares/d6efc54ac257334996c1ebdc6a7e2ac1
https://lightroom.adobe.com/shares/f6473eac5139db4e93f3283fb7abe163
https://lightroom.adobe.com/shares/ee0c82b65362634e8502063bf0bb928a
https://lightroom.adobe.com/shares/9d933e42efc59645b571186c94690953
https://lightroom.adobe.com/shares/94da4b2cce93944b90bc2566bf117bc4
https://lightroom.adobe.com/shares/64ce81f2c54d2b47a9eac145a131ba69
https://lightroom.adobe.com/shares/f0c72f0020831a4fbd177463ae29f994
https://lightroom.adobe.com/shares/6240a33493bc3e4ba6d8efa68b26d9ac
https://lightroom.adobe.com/shares/70d3e17bd6598f47b08916764261ddfc
https://lightroom.adobe.com/shares/2edc8d39bb0a0d4cbd3677cb9781a93d
https://lightroom.adobe.com/shares/c09fc89bf5b6ce4c810e382f5f67d37e
https://lightroom.adobe.com/shares/24e90b6da393b84c9974a39394bb8548
https://lightroom.adobe.com/shares/85f95c884e4c9748b98345274c4d9561
写的真的很不错
页:
[1]