yun2025 发表于 昨天 08:44

新宝股份:广交会期间公司移动空调等新品类受到海外采购商关注

新宝股份:广交会期间公司移动空调等新品类受到海外采购商关注

Junie GitHub Action:代码仓库分支更新可能取得工作流凭据

11月7日公开的漏洞记录CVE-2026-123852涉及Junie GitHub Action。Junie的GitHub自动化操作会在仓库工作流中运行,并可使用工作流获准使用的凭据。特定旧版在处理派生仓库更新时,可能使外部提交的代码带着这些权限执行。公告把1.8.0之前的版本列入范围,风险涉及自动化执行环境的凭据边界。版本清单标出的受影响范围包括1.8.0之前的版本。

这条记录给出的CVSS 3.1基础评分为7.4分,分级为高危。按照评分列出的条件,利用者可通过网络接触相关功能,不以事先取得系统权限为必要条件,并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、无。评分把利用复杂度列为较高,所反映的是触发这一缺陷需要满足的技术条件。

https://lightroom.adobe.com/shares/31a7956cde5c13478ca075ef9f992d0f
https://lightroom.adobe.com/shares/972c235ac4e7c54d9a0e27c141fa1ea7
https://lightroom.adobe.com/shares/b453990f4988b4499eb087ac94a5f3c8
https://lightroom.adobe.com/shares/f6b4b8799701e24180fa7d08408cced3
https://lightroom.adobe.com/shares/96fe7bbefd17b042b8dd4b9f7b6a3139
https://lightroom.adobe.com/shares/4b0dab18a91423408e4478d176b2a48c
https://lightroom.adobe.com/shares/4ca4c701e7912a48b0f936240c9cc510
https://lightroom.adobe.com/shares/ac65e0c5d2937f4f9f14ddb122541995
https://lightroom.adobe.com/shares/1e7fe016c2ec034489f22327221d840c
https://lightroom.adobe.com/shares/0d40a587554fb04ea0a5dad092075fb9
https://lightroom.adobe.com/shares/02438e6725750d459642d33ba9a23d88
https://lightroom.adobe.com/shares/ed3fbd0be05fbe4f9e2061dcb0251d02
https://lightroom.adobe.com/shares/cfdaf33da288a34ebacaed1a3ce89f52
https://lightroom.adobe.com/shares/434a949d8bcc18459a22f1b9847db8a6
https://lightroom.adobe.com/shares/3a2f28cbc1100642a7eecb1c9903f61a
https://lightroom.adobe.com/shares/29bdc8dd249bbe4db1e1084c657aba07
https://lightroom.adobe.com/shares/7674897455ad3d429404150d80a851ac
https://lightroom.adobe.com/shares/bf06e0b61ae4a6409c4625821d1aff4f
https://lightroom.adobe.com/shares/212998a63acbd94bbaca3cfac18693e0
https://lightroom.adobe.com/shares/08fab96694194746a77ba8610c11817d
https://lightroom.adobe.com/shares/c0df847895d85b4a84746fe43fbb766e
https://lightroom.adobe.com/shares/eab8cb56d17b814586271a7df3c7fab3
https://lightroom.adobe.com/shares/db13b01814dde74bb35d3e293226596e
https://lightroom.adobe.com/shares/a1b9efb2ef5f7c4d984d0e4dd4f7c704
https://lightroom.adobe.com/shares/19afe5e484379c4f9cf2802accb8af35
https://lightroom.adobe.com/shares/44a578999a1653489298816fe27f72ac
https://lightroom.adobe.com/shares/4843f9708796a24d98b756870daf4a4b
https://lightroom.adobe.com/shares/1f03240b6843654d9a268d5be1c5a7e8
https://lightroom.adobe.com/shares/4317892ad5e43346909d24583afb30d7
https://lightroom.adobe.com/shares/6cc02369dd5126478625fb0663cf0e0b
https://lightroom.adobe.com/shares/fa569dc843216845ac63749d1a60f2a4
https://lightroom.adobe.com/shares/35dd96ef80e61c4ca4aa555f95945a62
https://lightroom.adobe.com/shares/def15a147356e14ba68aec14f3d6fc0e
https://lightroom.adobe.com/shares/b8de0a85ba1df048b2c3aa5909dbb745
https://lightroom.adobe.com/shares/6bf68313e08f20449749619829b3a965
https://lightroom.adobe.com/shares/fb73b9bd1aaba04fb221f01ae127b4c4
https://lightroom.adobe.com/shares/2ac38e071712b04ca278fc2e727038c7
https://lightroom.adobe.com/shares/c3fb9b6f45eeb04cac82e1fef84bd631
https://lightroom.adobe.com/shares/b7b07c2c41301f45b41d3ff9d6f41a29
https://lightroom.adobe.com/shares/7b0259da5ee97b41b2af4151d0f46af5
https://lightroom.adobe.com/shares/cecbc59958d62148a58eb26ebe2709fc
https://lightroom.adobe.com/shares/a66024ced2f4394b8a91a197408a97cb
https://lightroom.adobe.com/shares/6e25210449a81447b7049061c8a3b1bc
https://lightroom.adobe.com/shares/b5acb1f834c710459ef04078fdef3c65
https://lightroom.adobe.com/shares/ea73150a3c0f8e4490e13fef7cf466e6
https://lightroom.adobe.com/shares/f4f81043116e3c468168a772b7901df9
https://lightroom.adobe.com/shares/04f4c3061308514d90be4c4d12bb86b3
https://lightroom.adobe.com/shares/3783cba6b8dcd74488ef0c93f08d519c
https://lightroom.adobe.com/shares/4e9268658bb9e94da82055a685913e16
https://lightroom.adobe.com/shares/81d6f49cfb20c648ad11d2b7d0ab9888

考雷斯特拉兹 发表于 昨天 08:46

沙发!沙发!
页: [1]
查看完整版本: 新宝股份:广交会期间公司移动空调等新品类受到海外采购商关注