yun2025 发表于 昨天 01:25

收购40%股权+增资1亿元 开勒股份拟控股威泰思 提示商誉减值等风险

收购40%股权+增资1亿元 开勒股份拟控股威泰思 提示商誉减值等风险

Symfony:对象反序列化可越过嵌套属性的忽略设置

11月7日公开的漏洞记录CVE-2026-122053涉及Symfony。Symfony的序列化组件会把某些带分隔符的字段名理解为对象属性路径。处理不可信输入时,原本应排除的嵌套字段可能沿这条路径被写入。问题涉及多个维护分支,应用是否将外部输入交由相应对象正规化器处理,是判断暴露面的相关条件。版本清单标出的受影响范围包括5.4.41起至5.4.56之前、6.4.9起至6.4.50之前、7.0.9起至7.1.0之前、7.1.2起至7.4.23之前、8.0.0起至8.1.11之前。

这条记录给出的CVSS 3.1基础评分为6.5分,分级为中危。按照评分列出的条件,利用者可通过网络接触相关功能,不以事先取得系统权限为必要条件,并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为低、低、无。

https://lightroom.adobe.com/shares/d093c5ab193f2c4c88e98fd7a4753ff9
https://lightroom.adobe.com/shares/60df9cc99f7d8846a7fabc749929a1bd
https://lightroom.adobe.com/shares/d4152505abe55b47bf3d5df27cf26bc7
https://lightroom.adobe.com/shares/7f0cf0a328d7c44a95acf9dc58daad10
https://lightroom.adobe.com/shares/8416e82c568c0144b3194347977024d7
https://lightroom.adobe.com/shares/f606d439d0980d47b8148c68dd0fdb6a
https://lightroom.adobe.com/shares/ee869d889474d649aadee61673e340a2
https://lightroom.adobe.com/shares/643b7234024139458c8fdeff57803551
https://lightroom.adobe.com/shares/918134ac3aea794c937d80a9a98569be
https://lightroom.adobe.com/shares/47119f5a001bf94383f44f975fb623b5
https://lightroom.adobe.com/shares/3a31a1e4eb5a1646afd2797487019923
https://lightroom.adobe.com/shares/f325c21922eeef4bbf995c4284908761
https://lightroom.adobe.com/shares/67b00934b2c5b5449e81a28729c5560e
https://lightroom.adobe.com/shares/4c0db2c4120d014db39ae89347a68329
https://lightroom.adobe.com/shares/0be6b1b17f9b4a47b19c702605562242
https://lightroom.adobe.com/shares/dd7ef8b18bc4914a9d5e938ce5f07b50
https://lightroom.adobe.com/shares/58beb521fd6ec142993b62c082ae1ff9
https://lightroom.adobe.com/shares/452bbfe160c3e4458fa5c3fb18aa5e75
https://lightroom.adobe.com/shares/9f2b29939d7b654b8465b80de4253ab0
https://lightroom.adobe.com/shares/2a0ccadbb28db14c9dc7f4705f29bec5
https://lightroom.adobe.com/shares/c7776f4f59d9524d928f1ee1cc489f01
https://lightroom.adobe.com/shares/ddb30b0e6c11304190407edc7aa02981
https://lightroom.adobe.com/shares/baab899161a1da43808351576ea51d64
https://lightroom.adobe.com/shares/f56b9bb73edb6948869bc139a5e27bf9
https://lightroom.adobe.com/shares/11db635383008e47be82acf1f4494679
https://lightroom.adobe.com/shares/21eedc5187dc7e4981797d0769bd6ebc
https://lightroom.adobe.com/shares/4d8263f705c08d4590dad15f9455e324
https://lightroom.adobe.com/shares/4e19f8164c1c8242b02995336c125635
https://lightroom.adobe.com/shares/6b6cca1cd6469a429d2995bb9d9bdb6f
https://lightroom.adobe.com/shares/1bcf8fe84fa61f49ba3931ad17bdcd85
https://lightroom.adobe.com/shares/abc144ec8f28aa46ad88cc9857e1c803
https://lightroom.adobe.com/shares/e3c2159679e2b446a81591b2c2a4dfde
https://lightroom.adobe.com/shares/374d9ec1c250a145abf03b03b479c1e2
https://lightroom.adobe.com/shares/b76d1b60e6fb26428fa045dda0bd181f
https://lightroom.adobe.com/shares/e08bf1b0d335954080c6b2c7b23abb54
https://lightroom.adobe.com/shares/e2fc0d1c43b5694ab104d0c86e74f7b4
https://lightroom.adobe.com/shares/79bd7b7074394d4aa75eebec95a98cab
https://lightroom.adobe.com/shares/327b2dcc26e80541a687a1a746c8db82
https://lightroom.adobe.com/shares/c34956d200e71e4fa27d52006b823943
https://lightroom.adobe.com/shares/700c31ed8889e746828588db6e9a901c
https://lightroom.adobe.com/shares/0f9d8e2d5d424e4c911507ea4a3b27b0
https://lightroom.adobe.com/shares/27e2987b793d944c9bb2076c089d3ab5
https://lightroom.adobe.com/shares/5c2728b97511634f989bfd4c2ed5d6a0
https://lightroom.adobe.com/shares/8a518ac7e9fca8489fdae64f3940d395
https://lightroom.adobe.com/shares/ff8dd2c57a5ff542ba57102d8d7bb916
https://lightroom.adobe.com/shares/5e22362710450a409dea9920d528de38
https://lightroom.adobe.com/shares/54afb86ad15e9b45bd737d8db770e273
https://lightroom.adobe.com/shares/ed4db6ed6e48c94aa6f301da6e9b5512
https://lightroom.adobe.com/shares/dd02dd99d621a84fbfcdc8ebe9aa9883
https://lightroom.adobe.com/shares/8874520b9c46fe4abf02814ac0284452

古鲁斯 发表于 昨天 01:29

写的真的很不错
页: [1]
查看完整版本: 收购40%股权+增资1亿元 开勒股份拟控股威泰思 提示商誉减值等风险