yun2025 发表于 4 小时前

毕马威发布最新跨国企业中国展望报告:跨国企业战略重心转向盈利与创新

毕马威发布最新跨国企业中国展望报告:跨国企业战略重心转向盈利与创新

shadow:依赖归档中的目录穿越名称可能被带入构建产物

11月7日公开的漏洞记录CVE-2026-75598涉及shadow。Gradle的Shadow插件会把应用及其依赖合并成JAR文件。在相应处理路径下,插件未独立验证依赖归档里各条目的名称,带有目录穿越成分的名字可能被保留到输出中。风险因此可以从第三方依赖传递给后续处理该构建产物的程序。版本清单标出的受影响范围包括低于9.6.0。

这条记录给出的CVSS 3.1基础评分为6.3分,分级为中危。按照评分列出的条件,利用者需要具备本地访问条件,不以事先取得系统权限为必要条件,并且需要其他用户参与触发。数据保密性、内容完整性和服务可用性三项的影响等级分别为无、高、无。评分把利用复杂度列为较低,所反映的是触发这一缺陷需要满足的技术条件。该分值采用十分制,衡量这条记录所描述情形下的技术严重性。

https://lightroom.adobe.com/shares/c859ccc87a5deb4b8423c5537b39d217
https://lightroom.adobe.com/shares/ce96704a9b620f40b88ac2e41d2a37b3
https://lightroom.adobe.com/shares/aeb2069386262c43b69dc2c37871e67b
https://lightroom.adobe.com/shares/710fdd22ed292445822810722cf490fb
https://lightroom.adobe.com/shares/b522bf1c4304434ebb2e891c37cc6f3e
https://lightroom.adobe.com/shares/2dc8714e80c2364aa56834b61c944ce7
https://lightroom.adobe.com/shares/e9311aec02733641a3b4c5cedb49a6ef
https://lightroom.adobe.com/shares/48ac1a77dec8fe45be0ea2844986166c
https://lightroom.adobe.com/shares/c20fa8c02d335a4bad4231e0006e733f
https://lightroom.adobe.com/shares/d5b53a07c898994f8221d44015d24ee7
https://lightroom.adobe.com/shares/8eea344851f8384482a464080ba46a28
https://lightroom.adobe.com/shares/d3494b7c1e7ba84c85ef371bb1158ace
https://lightroom.adobe.com/shares/eac0fd796035d442a2c17153bb6e8ac3
https://lightroom.adobe.com/shares/c600067da553654cb008532319f29fe1
https://lightroom.adobe.com/shares/733bb549d8c60b4eac2f5b8c52d3a95b
https://lightroom.adobe.com/shares/37198a2a26ede5409f1dbeb8ef03d1b3
https://lightroom.adobe.com/shares/b90bf8837e477f4daba52ee004fe2a99
https://lightroom.adobe.com/shares/d3a494f77633ed47a41b9d1f401d87d0
https://lightroom.adobe.com/shares/e6b70ea13f5fef4aa5a4e718ac92be31
https://lightroom.adobe.com/shares/ef4712ad567c9141becc8f48285a8301
https://lightroom.adobe.com/shares/c123c95333db9c42a0467408841aebd7
https://lightroom.adobe.com/shares/b271f07697a36c4db7378fd54fbaadaf
https://lightroom.adobe.com/shares/d4c231de13b6684d92996548a86a0898
https://lightroom.adobe.com/shares/231c0f48f060df4eb46b93163c2cdfc0
https://lightroom.adobe.com/shares/cd7f1a94a860e244a1914939f3ccd201
https://lightroom.adobe.com/shares/de3dd3e784965d4aba6b697ef7681892
https://lightroom.adobe.com/shares/7f3ab8f86cc48844867de686c87bb70e
https://lightroom.adobe.com/shares/bde625229c53054a960f91e0ed95102c
https://lightroom.adobe.com/shares/a5c48655ce46404d9ba0263e18fe0e2f
https://lightroom.adobe.com/shares/ec9b97fd82bbed4784b1d096ceeeff9a
https://lightroom.adobe.com/shares/8345f23ce244e74f987d92c1b355a138
https://lightroom.adobe.com/shares/1212481bdf84fa40bdd899d32136b880
https://lightroom.adobe.com/shares/9e8434b29bf9c045903b534f54b25da1
https://lightroom.adobe.com/shares/c7e31ef36908f34f8df4b84b3a7d1878
https://lightroom.adobe.com/shares/ba4ef6dd72b6d84e8c32124b9a4002cd
https://lightroom.adobe.com/shares/91f4f4f1c9322743a90b8fdb888d4e69
https://lightroom.adobe.com/shares/162056303e0aba47b28d676566767812
https://lightroom.adobe.com/shares/d05e9fe32741504da4d93f9886e5b38b
https://lightroom.adobe.com/shares/c303cdba75e2fc46b0ef2b4644111643
https://lightroom.adobe.com/shares/bb69dbe25b7c294bb73141caca682870
https://lightroom.adobe.com/shares/84fc66340c370a41962a91ac47288a55
https://lightroom.adobe.com/shares/27819e76d9b83b4bb0976ca83341865d
https://lightroom.adobe.com/shares/5c40e21601a38b41bc931604ba21239f
https://lightroom.adobe.com/shares/0b16a6fa68d2ce4ea1523c6997cd2231
https://lightroom.adobe.com/shares/18803432adf0b3408e37407a84977eda
https://lightroom.adobe.com/shares/819f5eb1e6b411429adbdda96c45cd35
https://lightroom.adobe.com/shares/f5a34656d9739b4e998b73556ca708eb
https://lightroom.adobe.com/shares/ac2f59904b0234479c090d22ea94cd5d
https://lightroom.adobe.com/shares/6d757166e0d6c0469181cf0dbf899b68
https://lightroom.adobe.com/shares/9779cea4e56f8e4d9de4640f574d9221

艾德利雷 发表于 4 小时前

沙发!沙发!
页: [1]
查看完整版本: 毕马威发布最新跨国企业中国展望报告:跨国企业战略重心转向盈利与创新