进博会看外企新动作：从“在中国销售”到深入布局“在中国智造”
进博会看外企新动作：从“在中国销售”到深入布局“在中国智造”Kroki：绘图后端安全模式未覆盖全部文件读取操作
11月7日公开的漏洞记录CVE-2026-102359涉及Kroki。Kroki可将文字描述转换成图形。处理TikZ图表时，特定安全检查只拦截了一种文件读取方式，排版引擎还有其他读取操作可用。向绘图接口提交的内容因此可能接触服务器上的文件，即使部署者已经启用了预期用于隔离输入的安全模式。版本清单标出的受影响范围包括低于0.31.2。
这条记录给出的CVSS 3.1基础评分为7.5分，分级为高危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、无、无。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。
https://lightroom.adobe.com/shares/4eadb083c4b49041970212c2354bf823
https://lightroom.adobe.com/shares/eccbeb33052844419d43c735602fdf88
https://lightroom.adobe.com/shares/81b62a08d84c7840b042bfedfdc85bba
https://lightroom.adobe.com/shares/7f33451c7bfd544182f023915eaf5ef5
https://lightroom.adobe.com/shares/ed23b7103c641d469ba95c079c7746a8
https://lightroom.adobe.com/shares/fb21ffcf505654458e8a760e495b779a
https://lightroom.adobe.com/shares/1147502f3aba5346b104d33e516639b8
https://lightroom.adobe.com/shares/bc1335e455e5a745a69fcb3d8af24a0a
https://lightroom.adobe.com/shares/7b4ce888354f584ea5b67be00b2265c9
https://lightroom.adobe.com/shares/8d779ac310e40b40966d9bee5eeffd31
https://lightroom.adobe.com/shares/302f3783829b41478551a2a0895b265e
https://lightroom.adobe.com/shares/def9f77b18b9c249a7e6d5c06268b3c1
https://lightroom.adobe.com/shares/7f37b7479d4c4146b234441e7f37f8af
https://lightroom.adobe.com/shares/ac3343b049054546933370638662c1be
https://lightroom.adobe.com/shares/5c79ed1ffd82994ab89ffa6e70906675
https://lightroom.adobe.com/shares/89dc9f7194752f44b88a6b5a97ef6536
https://lightroom.adobe.com/shares/68799775465a5e4ca653b8aa4bea847e
https://lightroom.adobe.com/shares/12dd28e889d4b04aaa58f3426a16aace
https://lightroom.adobe.com/shares/cf5cea80c2894440824e01463b0185b8
https://lightroom.adobe.com/shares/018bde1da13cae42b99f9132a5edce66
https://lightroom.adobe.com/shares/9aa5d62002412045bfcb2f55a0c33abc
https://lightroom.adobe.com/shares/7925a5e29424e24d8044a1ecf016094b
https://lightroom.adobe.com/shares/5fe536bbd51ecb4182f3d6398051d17c
https://lightroom.adobe.com/shares/290d179c52ebca48951270396d50120f
https://lightroom.adobe.com/shares/c684835990ceb14ebb258e69535a83a6
https://lightroom.adobe.com/shares/939fa0f63f228641bdc5bb32370f006c
https://lightroom.adobe.com/shares/1e38f073d278c34c99c9d74844b15dcc
https://lightroom.adobe.com/shares/6d959dd240072649a6f66d18e4248d00
https://lightroom.adobe.com/shares/4d27faaf10ef2a4891693147c712761f
https://lightroom.adobe.com/shares/aeb1dc7446eab545bb51c707505e6ec9
https://lightroom.adobe.com/shares/236760be236cfc438d4dcc15a4175ac9
https://lightroom.adobe.com/shares/c61a494952d2f849b4d07aa6f01f7b98
https://lightroom.adobe.com/shares/0306ef9ec93cb0468d5d57432fa0944f
https://lightroom.adobe.com/shares/f430c795cb19444d863106eaa4c2248b
https://lightroom.adobe.com/shares/224bda531641204e87bad69a3e3c5030
https://lightroom.adobe.com/shares/6b3253241ae9a546a02c2175ff7a69db
https://lightroom.adobe.com/shares/a4ba5d98e7f0a346ae1249004f02f10b
https://lightroom.adobe.com/shares/fdd4956b583e32449e3a8fbd6bbf0119
https://lightroom.adobe.com/shares/8c57808617961643814e1ee1daa75e49
https://lightroom.adobe.com/shares/918fc9717f8be04f90242840a5a08ba1
https://lightroom.adobe.com/shares/149d7f8c0f74d047a798b7abed1929f8
https://lightroom.adobe.com/shares/7c67bec2b69a854a8a2b86821ee7fbc3
https://lightroom.adobe.com/shares/70531bd5de9af543832f4f3f2d7857fe
https://lightroom.adobe.com/shares/3664ab329074084c9f9704d950aa5527
https://lightroom.adobe.com/shares/a2d93bd2cc265b4c9cccde9cca26e79c
https://lightroom.adobe.com/shares/94ca583eaf8bcf4b81618b6e23e8bd26
https://lightroom.adobe.com/shares/bdf66e1c476edd4f87476cd5019ef89c
https://lightroom.adobe.com/shares/0381da0a98d3584bb8ac9b9dbddaf05a
https://lightroom.adobe.com/shares/95285c08bbe1f4429a0d844d84ce4852
https://lightroom.adobe.com/shares/1c9cd29e01031542b2b47d0641f8b0c9
沙发！沙发!
页:
[1]