蓝河控股：股票继续暂停买卖
蓝河控股：股票继续暂停买卖Kroki：绘图后端安全模式未覆盖全部文件读取操作
11月7日公开的漏洞记录CVE-2026-102359涉及Kroki。Kroki可将文字描述转换成图形。处理TikZ图表时，特定安全检查只拦截了一种文件读取方式，排版引擎还有其他读取操作可用。向绘图接口提交的内容因此可能接触服务器上的文件，即使部署者已经启用了预期用于隔离输入的安全模式。版本清单标出的受影响范围包括低于0.31.2。
这条记录给出的CVSS 3.1基础评分为7.5分，分级为高危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、无、无。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。
https://lightroom.adobe.com/shares/361745df0feaf24c8a718a68f2024843
https://lightroom.adobe.com/shares/e3e8c1e399ef534c9791b21007e1c31d
https://lightroom.adobe.com/shares/01b655c1956cdb439e5f42bc3a87a339
https://lightroom.adobe.com/shares/3deea0b28fb6614ab66cca62ffe8ac63
https://lightroom.adobe.com/shares/50bbd03cb581fb4cb177b964ccb8faba
https://lightroom.adobe.com/shares/e50d7806c360254682b177defe4e8fc9
https://lightroom.adobe.com/shares/461aec3b5ee34648aca5448451cd5a7f
https://lightroom.adobe.com/shares/d8f6621ed563614aac28b97f5b164814
https://lightroom.adobe.com/shares/dbaa7abf97c73c4e8cedbf1cdd39c420
https://lightroom.adobe.com/shares/17f5a10afc3e83428ad29c248cc4702d
https://lightroom.adobe.com/shares/e9d06d824316a044a602bc93d8071f3c
https://lightroom.adobe.com/shares/b77cdbaceb1d014e99cf3c248fde8846
https://lightroom.adobe.com/shares/ac90bfa7b55f234696b21f0d197cda5b
https://lightroom.adobe.com/shares/1994f9b51f3d684990b2fc74d854592b
https://lightroom.adobe.com/shares/dfd5f8b4f1b6304b924a7b1dedc152aa
https://lightroom.adobe.com/shares/5d0c7d078d9ea541b204ae80c20131f9
https://lightroom.adobe.com/shares/b97dc6b2e1b01345a7f49ebbe08c230a
https://lightroom.adobe.com/shares/94637d4de577fd4a8d2e011fa11e43df
https://lightroom.adobe.com/shares/e4bd2b2e79900b40bdfab8d48c39947b
https://lightroom.adobe.com/shares/3042b5b6eea5094f984bc7647e29742f
https://lightroom.adobe.com/shares/02de2720916bbb458d675a8c84f021e2
https://lightroom.adobe.com/shares/0c1126d5efe21b4fb00e169712ff042a
https://lightroom.adobe.com/shares/7d52e0b727644141b310006a8fd46d6b
https://lightroom.adobe.com/shares/49b846eec6128f49bc50ce587cd50f4f
https://lightroom.adobe.com/shares/c8ee336a4c82714cb54caf9998956fde
https://lightroom.adobe.com/shares/bd65dc081ec7024db8f4dd9ee422f903
https://lightroom.adobe.com/shares/b3bbc214461dd84589e7866b27a19f9d
https://lightroom.adobe.com/shares/1ee8b719e01da04f8be941c3bd324d16
https://lightroom.adobe.com/shares/539fdf0e473ac94b8a43dea16c1f7919
https://lightroom.adobe.com/shares/248af1535a16024b9d9301e0deade764
https://lightroom.adobe.com/shares/0a574a90a9d2ae4d85d1bb0ce656d208
https://lightroom.adobe.com/shares/1bf6a81db4fffb4aab680e12cbddadef
https://lightroom.adobe.com/shares/7d81e3ff815273429060025b08862848
https://lightroom.adobe.com/shares/a6e00e95bb67df44a6781ca9d3d46691
https://lightroom.adobe.com/shares/20a1577c91b9044785f48181757fb5a8
https://lightroom.adobe.com/shares/e0bab581d26f1c439894a3cedaa178e5
https://lightroom.adobe.com/shares/d2b3248a930791428501d7e2b52c6c76
https://lightroom.adobe.com/shares/10a5798550ef43409fea2112fd13f984
https://lightroom.adobe.com/shares/a782c639b2aa5c49acdde60c3e7c667e
https://lightroom.adobe.com/shares/7834114d6fb45b4da36eeb518e0d54fb
https://lightroom.adobe.com/shares/a90530f6eb10ea4384315b491245cf26
https://lightroom.adobe.com/shares/a8bee0343b4cd7429fcd775f8a19c6d9
https://lightroom.adobe.com/shares/4fe4312d293df041816a7ae7df96675c
https://lightroom.adobe.com/shares/c68f5c32de579f4aafabb22dc10f2791
https://lightroom.adobe.com/shares/96d0529eb3a40442a62b65973442f895
https://lightroom.adobe.com/shares/373e8eeb2c891644a22ce7aa57bc1ac0
https://lightroom.adobe.com/shares/36311872785bcf478d0425433bbf5c3e
https://lightroom.adobe.com/shares/3acf12a37bc0ca418374c99e897835a1
https://lightroom.adobe.com/shares/4539a30ef9574a4ea7b8d7f8db801d18
https://lightroom.adobe.com/shares/2a2f91167ef771469bf238f6ddbebc99
我抢、我抢、我抢沙发~
页:
[1]