yun2025 发表于 昨天 16:02

10月居民消费价格和工业生产者出厂价格数据将公布

10月居民消费价格和工业生产者出厂价格数据将公布

shadow:依赖归档中的目录穿越名称可能被带入构建产物

11月7日公开的漏洞记录CVE-2026-75598涉及shadow。Gradle的Shadow插件会把应用及其依赖合并成JAR文件。在相应处理路径下,插件未独立验证依赖归档里各条目的名称,带有目录穿越成分的名字可能被保留到输出中。风险因此可以从第三方依赖传递给后续处理该构建产物的程序。版本清单标出的受影响范围包括低于9.6.0。

这条记录给出的CVSS 3.1基础评分为6.3分,分级为中危。按照评分列出的条件,利用者需要具备本地访问条件,不以事先取得系统权限为必要条件,并且需要其他用户参与触发。数据保密性、内容完整性和服务可用性三项的影响等级分别为无、高、无。评分把利用复杂度列为较低,所反映的是触发这一缺陷需要满足的技术条件。该分值采用十分制,衡量这条记录所描述情形下的技术严重性。

https://lightroom.adobe.com/shares/c5cc004d44e1f74989c6824cad640c31
https://lightroom.adobe.com/shares/db33855af6ebed4b955271a3e427db00
https://lightroom.adobe.com/shares/35cfddedd0675e438897f095a330cf61
https://lightroom.adobe.com/shares/410a803c274f94449f506beb78597033
https://lightroom.adobe.com/shares/3772144b1f35b24b95549c00c7a946d7
https://lightroom.adobe.com/shares/3ea3630bc56e1149a7d6408eb9511cd8
https://lightroom.adobe.com/shares/9b67afb7b985fc4c97debd5860c68afe
https://lightroom.adobe.com/shares/70170264a7215b4b95cf7177c0f129f1
https://lightroom.adobe.com/shares/f451dfa10cb57c4a9e21d6fed8906c67
https://lightroom.adobe.com/shares/dd87e9a14f0efe4cb19d331efaa35cbc
https://lightroom.adobe.com/shares/c82eee51ab8456408852f2d1c88521c4
https://lightroom.adobe.com/shares/2b5b18aef4520c4c9eb710ecf5736892
https://lightroom.adobe.com/shares/ce96bd7dfa4cd841bc1da65ad87395fe
https://lightroom.adobe.com/shares/7edd523b85dd37409566d3956b236146
https://lightroom.adobe.com/shares/03cd26d0d67d1c469db6d3c0d59a36f7
https://lightroom.adobe.com/shares/16f13e3575aeda4b9a4c0314d01e8caf
https://lightroom.adobe.com/shares/2a3ca60c52956f44ba804401705c0b6d
https://lightroom.adobe.com/shares/a63c4e9763665e459a2560f348bbc6a6
https://lightroom.adobe.com/shares/a2ced901e56c504792ca6351d8698555
https://lightroom.adobe.com/shares/afec63b27ead4340afd39e0f0a13f4b8
https://lightroom.adobe.com/shares/3cda709c300fdb468c05239b0a1b0d4e
https://lightroom.adobe.com/shares/bd7ccc57aa249d43a3525d4223861e39
https://lightroom.adobe.com/shares/17dad50e2e02a6479885e3fbf28e7bd4
https://lightroom.adobe.com/shares/2c2f13b76be08746b1a2aa73ad7f3c5e
https://lightroom.adobe.com/shares/f8f8a123c530c9429b0a72215ac35dd1
https://lightroom.adobe.com/shares/ad70a15c5fc927468f530e397c69a118
https://lightroom.adobe.com/shares/a1a27620cd0e97429d9597208fea794e
https://lightroom.adobe.com/shares/e9b64f25f7eeb74792f98f565cb97c33
https://lightroom.adobe.com/shares/f7a8e733d1700942a55b46439d135a19
https://lightroom.adobe.com/shares/4ca7b739934ad24bb71701da9c3f8558
https://lightroom.adobe.com/shares/a5a1f8a0ec22214a98d7448482ee5423
https://lightroom.adobe.com/shares/ee8c4c5acc82074b86116922571d335a
https://lightroom.adobe.com/shares/2ebc701e544e184ab8fb66a0a13c99a0
https://lightroom.adobe.com/shares/9b1f1bfd490a15439ef2ba12d81aca27
https://lightroom.adobe.com/shares/b688a884d0014946a89bba853743ea78
https://lightroom.adobe.com/shares/636bf3b1f818bd4f93dcd0d254b232ec
https://lightroom.adobe.com/shares/fc4659a6fd58fa40bc067051913e9cd7
https://lightroom.adobe.com/shares/8701d33d0226f448a487a8cab2adf808
https://lightroom.adobe.com/shares/a047fec0f41fd740bcaca2eab20d9568
https://lightroom.adobe.com/shares/66d166dff216344493d533b5af17b005
https://lightroom.adobe.com/shares/86c02b6dc6733f4e9e48ea4a19c05215
https://lightroom.adobe.com/shares/bb3ee1121fba0f41920b894a523c317f
https://lightroom.adobe.com/shares/f34e2f5844f68244a5ea6dd755b2921a
https://lightroom.adobe.com/shares/ca069729e7858345a464dc58c7ab3840
https://lightroom.adobe.com/shares/9d00940eae67d64a9d616cac21293d52
https://lightroom.adobe.com/shares/f7a3bb782b94ee4bb1a38f37bd007550
https://lightroom.adobe.com/shares/78fe5b1dac4a1145a3907532cc16dc80
https://lightroom.adobe.com/shares/c0868a479c29a547a53661da2b780eb9
https://lightroom.adobe.com/shares/3fc4aaeb019aea47972bbec84db90032
https://lightroom.adobe.com/shares/045f7c6c8ace2440888ae77593f69e5a

穿刺者戈莫克 发表于 昨天 16:10

我抢、我抢、我抢沙发~
页: [1]
查看完整版本: 10月居民消费价格和工业生产者出厂价格数据将公布