yun2025 发表于 昨天 23:06

海洋出水陶瓷文物腐蚀机制研究取得新进展

海洋出水陶瓷文物腐蚀机制研究取得新进展

Symfony:对象反序列化可越过嵌套属性的忽略设置

11月7日公开的漏洞记录CVE-2026-122053涉及Symfony。Symfony的序列化组件会把某些带分隔符的字段名理解为对象属性路径。处理不可信输入时,原本应排除的嵌套字段可能沿这条路径被写入。问题涉及多个维护分支,应用是否将外部输入交由相应对象正规化器处理,是判断暴露面的相关条件。版本清单标出的受影响范围包括5.4.41起至5.4.56之前、6.4.9起至6.4.50之前、7.0.9起至7.1.0之前、7.1.2起至7.4.23之前、8.0.0起至8.1.11之前。

这条记录给出的CVSS 3.1基础评分为6.5分,分级为中危。按照评分列出的条件,利用者可通过网络接触相关功能,不以事先取得系统权限为必要条件,并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为低、低、无。

https://lightroom.adobe.com/shares/9c7403a27a15a74da52812415b759cc6
https://lightroom.adobe.com/shares/2102a734992c4b479fd3fac859ddb176
https://lightroom.adobe.com/shares/f0b4f648ba90944bab9f1d76a1ba8089
https://lightroom.adobe.com/shares/ce98a8f9e02faf47a1f4a1e374e54dc7
https://lightroom.adobe.com/shares/97f22cef1b55d24a9e36ca17a1fc19d2
https://lightroom.adobe.com/shares/7f123b567793764d8688f3e3aac25425
https://lightroom.adobe.com/shares/2d465c0778b04745b3387d3589eb307d
https://lightroom.adobe.com/shares/d4c2f0073625e743ac9ad4f6f65d07ac
https://lightroom.adobe.com/shares/2e74c59e6ba88541a427e2bc6cdcc352
https://lightroom.adobe.com/shares/f8956d511669954089a37de0c43d1655
https://lightroom.adobe.com/shares/3310830580929a44a681558c6a938389
https://lightroom.adobe.com/shares/63b60c61ce87654db694bb1722e49a64
https://lightroom.adobe.com/shares/aa56441f6f549d4598ce3f8e00145352
https://lightroom.adobe.com/shares/11290ebd37b4bf43b1dd4b3cdbd47dac
https://lightroom.adobe.com/shares/fcd8a841b80c9541a392d0b2017a51d8
https://lightroom.adobe.com/shares/a39c5d8cc9f2c14d98c0fa890b4c26f7
https://lightroom.adobe.com/shares/9c720186b1d1de48b34523ac37d784d7
https://lightroom.adobe.com/shares/2311c778f8c29647a6c6b1d8a33010fb
https://lightroom.adobe.com/shares/a422ac54b96fcc458adf4adcaba43de2
https://lightroom.adobe.com/shares/d58c92024ec72f45a98e5d5f196c7c04
https://lightroom.adobe.com/shares/55af5c43153349448537bc40d369101f
https://lightroom.adobe.com/shares/c54c3c897faa784eaf2cd076bd1562c9
https://lightroom.adobe.com/shares/3737bc2f6678074caf834ffdd7ef6d74
https://lightroom.adobe.com/shares/68efb2deb8eff94e9ba1b4bf49e6e6ba
https://lightroom.adobe.com/shares/1d5ef7eeb2ad5e4da79f22a8db95a70c
https://lightroom.adobe.com/shares/3eeb0b7cc4f73543ad17a38ad123ea3f
https://lightroom.adobe.com/shares/6ea954035cd7d042b66725f3b9d41040
https://lightroom.adobe.com/shares/f55d6fa6be37124394cd352f506912cf
https://lightroom.adobe.com/shares/97f9dd5900b68d428bdf846014f98001
https://lightroom.adobe.com/shares/0211abc6001a7341b91efda7c49a8796
https://lightroom.adobe.com/shares/b0b96540a2ddbc4bbec0564b35050940
https://lightroom.adobe.com/shares/f8d02edcadf4bd4eb070032b4fb857b2
https://lightroom.adobe.com/shares/86347b21671cd6488383d707a279b0de
https://lightroom.adobe.com/shares/ffdf62ac858cc049baf674dce6a85eef
https://lightroom.adobe.com/shares/a34f82f34d870049b1669a7312bd874a
https://lightroom.adobe.com/shares/fdbc878c25773e41a6a4a6d1de383ca9
https://lightroom.adobe.com/shares/86d84598161df74e926331ad292ed1fc
https://lightroom.adobe.com/shares/ca146cf50c68aa419cdcdf4c3888bc6c
https://lightroom.adobe.com/shares/5b92921bfc03514b8f86295e9089ce9f
https://lightroom.adobe.com/shares/1779840b64d1e149848dc3665869c8ad
https://lightroom.adobe.com/shares/ebb2988758ebef459b90c6b6f70e8856
https://lightroom.adobe.com/shares/95544b8526851444a670c0b4cd825d8c
https://lightroom.adobe.com/shares/8565116a54b39c40931cb48be8d356c2
https://lightroom.adobe.com/shares/74d93afd62565044a33cd05a24bf6137
https://lightroom.adobe.com/shares/53f3936a30211a4e8a9686831756d2f1
https://lightroom.adobe.com/shares/8d8e2155ec18e248a0c0a6ecf0b4b589
https://lightroom.adobe.com/shares/892657abe93e2747837f08accefd4294
https://lightroom.adobe.com/shares/7d5de73c4766f44ea33a847a4cbc7c08
https://lightroom.adobe.com/shares/6f551689a981594da5adc4810357684d
https://lightroom.adobe.com/shares/4d71d767074f7d46bfb90e13e3ff609a

春颐堂 发表于 昨天 23:14

沙发!沙发!
页: [1]
查看完整版本: 海洋出水陶瓷文物腐蚀机制研究取得新进展