yun2025 发表于 昨天 13:39

西南头部租车公司大手笔:购入100台享界G9、10台智界V9

西南头部租车公司大手笔:购入100台享界G9、10台智界V9

SunEditor:富文本编辑器还原内嵌页面时遗漏过滤

11月8日公开的漏洞记录CVE-2026-124422涉及SunEditor。粘贴或导入富文本时,编辑器会清理部分HTML,再按保存的属性重建内嵌框架。问题发生在重建步骤,某些能加载文档内容的属性未被拦下。后来打开或粘贴这段内容的人,浏览器可能以编辑器所在网站的身份执行其中的脚本。版本清单标出的受影响范围包括3.0.0起至3.4.0之前。

这条记录给出的CVSS 3.1基础评分为6.1分,分级为中危。按照评分列出的条件,利用者可通过网络接触相关功能,不以事先取得系统权限为必要条件,并且需要其他用户参与触发。数据保密性、内容完整性和服务可用性三项的影响等级分别为低、低、无。评分把利用复杂度列为较低,所反映的是触发这一缺陷需要满足的技术条件。

https://lightroom.adobe.com/shares/cd03d1962ab8d24f888ea45209758744
https://lightroom.adobe.com/shares/864de9fe10f2a740bd31ce1e65713e67
https://lightroom.adobe.com/shares/59a5cd9c28d44b41badcbcbc8f408e4e
https://lightroom.adobe.com/shares/1dc28dbb420c73489ea41d7abb8a9023
https://lightroom.adobe.com/shares/9cb1cd31f3d1c14683acb4f6bf7826d8
https://lightroom.adobe.com/shares/0bdd35c2a060b142862d41126100173b
https://lightroom.adobe.com/shares/54725077744d574d9301db8eee289dfe
https://lightroom.adobe.com/shares/241366f3a1562f4f9a772a9ff5443997
https://lightroom.adobe.com/shares/9f35357cd1ff284cb0d9b78cbc0093e5
https://lightroom.adobe.com/shares/54c07cde15017142ba92b52472892bd8
https://lightroom.adobe.com/shares/9babd25b0c9216479a3ba0a899b3dd61
https://lightroom.adobe.com/shares/3792624c3deda14e9a7f5b2735274cab
https://lightroom.adobe.com/shares/ca061ed42b20c141a5f064fb7416aa4c
https://lightroom.adobe.com/shares/b853260c7ec9154bb67b07bfc0e388e9
https://lightroom.adobe.com/shares/434caccce60f9e4abeb606b13c026299
https://lightroom.adobe.com/shares/116a50b15f497c47aafb5235d754e1fa
https://lightroom.adobe.com/shares/85ecd5d3dfc66448a6b365ac832aca9a
https://lightroom.adobe.com/shares/278d25f8711b724f97c47bd4b9578ee2
https://lightroom.adobe.com/shares/da110b121cf56b46a9fe25b20342cc76
https://lightroom.adobe.com/shares/f434b4e188bb0342a25927f5565a98a7
https://lightroom.adobe.com/shares/1040458b1ffad14887b7b713e43edee7
https://lightroom.adobe.com/shares/1f1ef500c1e21f4e81e352e4389cca9b
https://lightroom.adobe.com/shares/09e6c9d45559d64f864d71b951aefed1
https://lightroom.adobe.com/shares/4aed0ff4bb0c804ab47076cf0feef212
https://lightroom.adobe.com/shares/f441eea1da762141b02c123be3238995
https://lightroom.adobe.com/shares/f62485cacd3d1147b7129a34dc9c6e27
https://lightroom.adobe.com/shares/2e19529aa1453b49bfbccfc8e3c02b6e
https://lightroom.adobe.com/shares/ed025765fa288045ab3e9c292ec8d5df
https://lightroom.adobe.com/shares/8ed1dedacf4c8646ba8124485c445113
https://lightroom.adobe.com/shares/0e6bd85ac5a7ec4384505ada4e4945cf
https://lightroom.adobe.com/shares/3cdd06247bccad42a8b42b66a9a6d398
https://lightroom.adobe.com/shares/e50e98eaf8ed004f80105ceaa5a7d411
https://lightroom.adobe.com/shares/b4be7737a89f4843925c00976c2606ca
https://lightroom.adobe.com/shares/28a0fbf672d46947bd4c444b427f5b44
https://lightroom.adobe.com/shares/91e5d6d83b2bd442a831f07b468e2350
https://lightroom.adobe.com/shares/4eb133ec0406254c945548f52cdbd8e7
https://lightroom.adobe.com/shares/6b472de9a80e4e449fc24a695b748993
https://lightroom.adobe.com/shares/3cbbf9192101174d89b6cd7a4f5814f1
https://lightroom.adobe.com/shares/01547b723c0aa8469b72a33b05173d2b
https://lightroom.adobe.com/shares/8645337ba8228041be37c8ee3acd2f6f
https://lightroom.adobe.com/shares/f4d783cbb236fd49b24ecfdf2f6886d4
https://lightroom.adobe.com/shares/dd3bd60f79ebf54eb4e24471be946310
https://lightroom.adobe.com/shares/c73538dec349294b83d6cce52c0e8564
https://lightroom.adobe.com/shares/24d614cfc9fc4648b3c92c2daa963e92
https://lightroom.adobe.com/shares/030c99aa4741fe4d901e761a0d4e7063
https://lightroom.adobe.com/shares/bebb86d024200047ad67459751bd76ce
https://lightroom.adobe.com/shares/11aa6a862cb6a8428f5ea64c30d2fc99
https://lightroom.adobe.com/shares/690164c44a68194bb855c4ad4f669610
https://lightroom.adobe.com/shares/6a443191e7222644bb00372c1439e2c4
https://lightroom.adobe.com/shares/699c5e8e3dfda946bf0cc55fd84d0f18

达格兰·索瑞森 发表于 昨天 13:42

我抢、我抢、我抢沙发~
页: [1]
查看完整版本: 西南头部租车公司大手笔:购入100台享界G9、10台智界V9