yun2025 发表于 昨天 11:56

阿法纳生物完成A轮融资首关 国中资本、合肥产投集团联合领投

阿法纳生物完成A轮融资首关 国中资本、合肥产投集团联合领投

Symfony:对象反序列化可越过嵌套属性的忽略设置

11月7日公开的漏洞记录CVE-2026-122053涉及Symfony。Symfony的序列化组件会把某些带分隔符的字段名理解为对象属性路径。处理不可信输入时,原本应排除的嵌套字段可能沿这条路径被写入。问题涉及多个维护分支,应用是否将外部输入交由相应对象正规化器处理,是判断暴露面的相关条件。版本清单标出的受影响范围包括5.4.41起至5.4.56之前、6.4.9起至6.4.50之前、7.0.9起至7.1.0之前、7.1.2起至7.4.23之前、8.0.0起至8.1.11之前。

这条记录给出的CVSS 3.1基础评分为6.5分,分级为中危。按照评分列出的条件,利用者可通过网络接触相关功能,不以事先取得系统权限为必要条件,并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为低、低、无。

https://lightroom.adobe.com/shares/7a5e4324cd9acf4fa3191cc0755deaff
https://lightroom.adobe.com/shares/994dada2d380714baa4fc37cd05c85b2
https://lightroom.adobe.com/shares/b35b89790862174681adb1c779bbe97f
https://lightroom.adobe.com/shares/532deec6bab4cd4abd5ff80523bc5270
https://lightroom.adobe.com/shares/4eef55d9a8f97744a2c91b5d19733153
https://lightroom.adobe.com/shares/7b2afd850fe0f349989d30910deb8b2e
https://lightroom.adobe.com/shares/81ceb2854109014aaf539456bc064c91
https://lightroom.adobe.com/shares/dffc4fb3b83e6c40a9d8ef354698df0e
https://lightroom.adobe.com/shares/454df7e5ce84b94e8281d7051c87074a
https://lightroom.adobe.com/shares/f79e9191efd1f0419ca7ea45b88adc03
https://lightroom.adobe.com/shares/0751c7d36b759746ac8014090e65d518
https://lightroom.adobe.com/shares/f7413248cee6ab4292ff8b1dea5372ba
https://lightroom.adobe.com/shares/dfe6445e2a87da448ea51d4a6e9e886a
https://lightroom.adobe.com/shares/c92de14a5f1f4c4d8cc2784345526278
https://lightroom.adobe.com/shares/ce3f423009605240beace29001bb4dd9
https://lightroom.adobe.com/shares/d4683bab2a6c2042a2feeedf0b85f628
https://lightroom.adobe.com/shares/346a212096e84f429d1ac48106c50f49
https://lightroom.adobe.com/shares/266f3993d174264a84dab45fced3b0bc
https://lightroom.adobe.com/shares/997213a8f2065c4b8de636a25829dda0
https://lightroom.adobe.com/shares/f7f7c470d1184f4ebfcf60265174134e
https://lightroom.adobe.com/shares/4e514b892f43f64caa22f96fd3b833b3
https://lightroom.adobe.com/shares/7d77ff0e97c7c34d85018a72b1c3b55c
https://lightroom.adobe.com/shares/21125054c8e2464a8409eb830a63d623
https://lightroom.adobe.com/shares/a48d5b92ee220a44bb32cfe01d3700e5
https://lightroom.adobe.com/shares/6a8bb3aa09efef438c0dea46303489ef
https://lightroom.adobe.com/shares/e1796a03d2ed0248a0bef33ca07d5069
https://lightroom.adobe.com/shares/3168afd500da9e4f91775db25ccf0903
https://lightroom.adobe.com/shares/ef5c8a6f348c3b408a3492857d4cbf6a
https://lightroom.adobe.com/shares/79f91f15d7451e4596872e4eeb62987d
https://lightroom.adobe.com/shares/87e488d870870a4a9c351757e47d7bd2
https://lightroom.adobe.com/shares/1a52741af70fd4468dd33ef1201c724f
https://lightroom.adobe.com/shares/dee84d065003214f92c7488e077861d3
https://lightroom.adobe.com/shares/8bf85c48e2ba0044a938167ec35cc02d
https://lightroom.adobe.com/shares/e471ec2575502943a648179de56ef62d
https://lightroom.adobe.com/shares/d38a0837c024a24aa8592eaa4b13eb3a
https://lightroom.adobe.com/shares/a8fedd5db6bf7341852947897b481d44
https://lightroom.adobe.com/shares/208dadc486214847822c4e0369fd69ca
https://lightroom.adobe.com/shares/fcd92841daa2bf46b85c352846460604
https://lightroom.adobe.com/shares/e5313fc984f59241a3aab13f537c05e3
https://lightroom.adobe.com/shares/86d718af412be54ab8785bd4677acd15
https://lightroom.adobe.com/shares/09b582189707f340b9c28aa780b59064
https://lightroom.adobe.com/shares/0f4a4d86a71c32419999e1aafe247627
https://lightroom.adobe.com/shares/3c4ae357b3252547a95514bc52e02e4c
https://lightroom.adobe.com/shares/77d1e0e456516442a96837c81dfe1a72
https://lightroom.adobe.com/shares/cb746acf0e35e049aaf50de9f5792e3c
https://lightroom.adobe.com/shares/d5ce42561320f5489cbf439fd27ef3b6
https://lightroom.adobe.com/shares/26419a2a91792844a5a3ddcc699a94fd
https://lightroom.adobe.com/shares/c076ea83eb86be4da2a07452a16b84e4
https://lightroom.adobe.com/shares/4abe16223cc4bb4396ddb1d484d827ad
https://lightroom.adobe.com/shares/671320b6197e9f4985213831175515d2

戈尔 发表于 昨天 11:58

路过,支持一下啦

斯莫德隆 发表于 昨天 12:09

沙发!沙发!
页: [1]
查看完整版本: 阿法纳生物完成A轮融资首关 国中资本、合肥产投集团联合领投