yun2025 发表于 4 小时前

算力向端侧下沉,芯片巨头竞速AI落地

算力向端侧下沉,芯片巨头竞速AI落地

SunEditor:富文本编辑器还原内嵌页面时遗漏过滤

11月8日公开的漏洞记录CVE-2026-124422涉及SunEditor。粘贴或导入富文本时,编辑器会清理部分HTML,再按保存的属性重建内嵌框架。问题发生在重建步骤,某些能加载文档内容的属性未被拦下。后来打开或粘贴这段内容的人,浏览器可能以编辑器所在网站的身份执行其中的脚本。版本清单标出的受影响范围包括3.0.0起至3.4.0之前。

这条记录给出的CVSS 3.1基础评分为6.1分,分级为中危。按照评分列出的条件,利用者可通过网络接触相关功能,不以事先取得系统权限为必要条件,并且需要其他用户参与触发。数据保密性、内容完整性和服务可用性三项的影响等级分别为低、低、无。评分把利用复杂度列为较低,所反映的是触发这一缺陷需要满足的技术条件。

https://lightroom.adobe.com/shares/e5fcfb832945e04cbf9587581bf31403
https://lightroom.adobe.com/shares/ad879a967e1bd24db7d9c9204300916c
https://lightroom.adobe.com/shares/6ee5bc8bea02264bb3decbb2a6e387e3
https://lightroom.adobe.com/shares/4cc9211f898ed8428d798421b4065da9
https://lightroom.adobe.com/shares/37111bb4bc04a046b32b41b0ace5d326
https://lightroom.adobe.com/shares/0be91ebc48d8ba429ff2798f5d18c2c8
https://lightroom.adobe.com/shares/448307b96221314799bc0dad43b37e55
https://lightroom.adobe.com/shares/63785e871655aa42a442ebc390b3fe06
https://lightroom.adobe.com/shares/c5ea846cd262a041bbd01f9e45883491
https://lightroom.adobe.com/shares/70a738f2009d2640974be7ce735a9e88
https://lightroom.adobe.com/shares/704f31376f2ba44f98f6dbcb7508f709
https://lightroom.adobe.com/shares/64cbdeff35bc994bb7cc1f65da3b1a29
https://lightroom.adobe.com/shares/516ed75792625e48815c1db8d1eeb848
https://lightroom.adobe.com/shares/dde53081c778fe45b7f80a21a43c879e
https://lightroom.adobe.com/shares/c61025674340ce4a83fb167c8ea8991b
https://lightroom.adobe.com/shares/3236d1d300f91943a9f6d88132971885
https://lightroom.adobe.com/shares/5e7f329cdb4c734fb2db47bea48542e8
https://lightroom.adobe.com/shares/a4f974749e37a948986aebbe00753ffa
https://lightroom.adobe.com/shares/ffd983cbed2b2f419d5318988a61429f
https://lightroom.adobe.com/shares/65b52b00eeee0044aaa172cb2a27eb68
https://lightroom.adobe.com/shares/ccb7cad66f3ea54ca96da2d44998afa5
https://lightroom.adobe.com/shares/e38991e3052f1e4e8f3904afe3bb700f
https://lightroom.adobe.com/shares/f7cf6df84d34164cb9995a9e7f866940
https://lightroom.adobe.com/shares/cdbe100afb19b640ab7b09b4b684d4a1
https://lightroom.adobe.com/shares/b2de0d2a266a2d4d898099f6f2f83df5
https://lightroom.adobe.com/shares/c2df5c0044e4dd4992113b8172e12b05
https://lightroom.adobe.com/shares/cfcb110083ed0e40b7cfa0050e927f8d
https://lightroom.adobe.com/shares/f789d28eccb72d4786768003d58e1f21
https://lightroom.adobe.com/shares/989a8396f444cf41bbfc82d7ed85bab3
https://lightroom.adobe.com/shares/c0dc2ccbfb82264eb915ca99c8c9f535
https://lightroom.adobe.com/shares/d1476c86ee534e4584ac2a310d5b2029
https://lightroom.adobe.com/shares/98d47a28a71b234eb9ced7955e5600e8
https://lightroom.adobe.com/shares/c549dc62ff438b458e1d0fe6bb1a248c
https://lightroom.adobe.com/shares/36cc2ca8e070fc4cb2c73ffaff71147d
https://lightroom.adobe.com/shares/7f826ffc40781a46a080c67d700e40e0
https://lightroom.adobe.com/shares/b2d9fe9b91a99e44a7925b037140e8c4
https://lightroom.adobe.com/shares/40444d5dfd94ec4c9a6acaad9d51f30c
https://lightroom.adobe.com/shares/091a9da91454394f8e9936aa34d1edf5
https://lightroom.adobe.com/shares/e182abdce6ee194c90440b9c1e34223b
https://lightroom.adobe.com/shares/2f8abbf051883d4b8e842f3b2f69cf45
https://lightroom.adobe.com/shares/73adbd7533b1f047a482996c1ca57d06
https://lightroom.adobe.com/shares/97cac9dd22d33043866ec3dccbab1f2e
https://lightroom.adobe.com/shares/40849a2dfb0da041998af8310d537fec
https://lightroom.adobe.com/shares/c96e06f8f41d9c4bae395d3e65e34e20
https://lightroom.adobe.com/shares/7d214c41892d3949b88231442ec7d757
https://lightroom.adobe.com/shares/2a2d76084bff9e47bda2730417e3661e
https://lightroom.adobe.com/shares/f9517129bfa12e4fa3398dad5c66ae36
https://lightroom.adobe.com/shares/08b70fa30e172243bbf55c7b3e970e0c
https://lightroom.adobe.com/shares/648dc33cadc82d419c8021e44d0f3d27
https://lightroom.adobe.com/shares/853ae5990a0d504ba5219cef0ec3eec4

澧兰沅芷 发表于 4 小时前

我抢、我抢、我抢沙发~
页: [1]
查看完整版本: 算力向端侧下沉,芯片巨头竞速AI落地