yun2025 发表于 24 分钟前

控股股东2120万股再上法拍台、过半持股仍被冻结,ST晨鸣前三季度收入却增逾两倍

控股股东2120万股再上法拍台、过半持股仍被冻结,ST晨鸣前三季度收入却增逾两倍

Symfony:对象反序列化可越过嵌套属性的忽略设置

11月7日公开的漏洞记录CVE-2026-122053涉及Symfony。Symfony的序列化组件会把某些带分隔符的字段名理解为对象属性路径。处理不可信输入时,原本应排除的嵌套字段可能沿这条路径被写入。问题涉及多个维护分支,应用是否将外部输入交由相应对象正规化器处理,是判断暴露面的相关条件。版本清单标出的受影响范围包括5.4.41起至5.4.56之前、6.4.9起至6.4.50之前、7.0.9起至7.1.0之前、7.1.2起至7.4.23之前、8.0.0起至8.1.11之前。

这条记录给出的CVSS 3.1基础评分为6.5分,分级为中危。按照评分列出的条件,利用者可通过网络接触相关功能,不以事先取得系统权限为必要条件,并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为低、低、无。

https://lightroom.adobe.com/shares/92d546aae4829c41b1b47e844910949b
https://lightroom.adobe.com/shares/755292c50ec5b14dbbb8de5fef59a9d6
https://lightroom.adobe.com/shares/d76f6e8913b0cc4bb6a2e7f30107789b
https://lightroom.adobe.com/shares/1a8bb86d7485e340bee80ef3a95d0d07
https://lightroom.adobe.com/shares/2d4944e6c6956d4c88db2ea8ad2b8f39
https://lightroom.adobe.com/shares/1243ebaf966a6842a88f4cb48230d69a
https://lightroom.adobe.com/shares/964b5e4aa730314f9fdbe4b568becc1d
https://lightroom.adobe.com/shares/28dfe2fc823f3249892d96c9c20b621a
https://lightroom.adobe.com/shares/d4519550b6bd5545871a8daef934e866
https://lightroom.adobe.com/shares/bbb89066b70e324d8b7b7b32c2be21cd
https://lightroom.adobe.com/shares/076e78cc0bfe5640986634f5cf1afdc8
https://lightroom.adobe.com/shares/21a4e79f7a0815439620054c4818b18a
https://lightroom.adobe.com/shares/6d67985e7b4f224f97ae95b8d1ef1426
https://lightroom.adobe.com/shares/e9ba38441649524fa9c2719e53dbeb1a
https://lightroom.adobe.com/shares/73c944e4a6239943831e4f725041c414
https://lightroom.adobe.com/shares/81a0dd184ca9c34ebae109f7f8915690
https://lightroom.adobe.com/shares/c57b89e20ae4ee41be84cf2a1002a35a
https://lightroom.adobe.com/shares/2e547b835d125440b69ad00c382155dd
https://lightroom.adobe.com/shares/f99930501f2cb0428e213cb875917573
https://lightroom.adobe.com/shares/4ac950b442f7164c848f4f82a7037b86
https://lightroom.adobe.com/shares/08f360cd61f0ea41bf625c7964094358
https://lightroom.adobe.com/shares/1c5577a6d9c33c4f8090e2188eaa6b46
https://lightroom.adobe.com/shares/117289f0ba74924cae2edba19e08c8e7
https://lightroom.adobe.com/shares/e50b385ebee9ce47887692b25e5d903d
https://lightroom.adobe.com/shares/ec712263c27d5f47b42a80466c3e6be7
https://lightroom.adobe.com/shares/b08726a53ba5e444a5957280cb470394
https://lightroom.adobe.com/shares/7b5132df1a8ef848b45df6c73e235a83
https://lightroom.adobe.com/shares/0cc6af1054b4164c8542bc7c68ad4146
https://lightroom.adobe.com/shares/6507d7b6ec36c04e82561c6be5c17004
https://lightroom.adobe.com/shares/b2ebcd495c032e48ab593ed55ec651d6
https://lightroom.adobe.com/shares/43c34f8cd9a337438d44d68b15e65cf9
https://lightroom.adobe.com/shares/be46e8fa76b55d42a81b7fb2976d5e1a
https://lightroom.adobe.com/shares/b6145d235fcd7e469ba47e620871c1dd
https://lightroom.adobe.com/shares/3e296bdeca5f7d4088e4c50591d3ff92
https://lightroom.adobe.com/shares/c59c8518e1e0424bb473e3824f8f4823
https://lightroom.adobe.com/shares/66c4dbb1402caf4a8604ef53fc6e8115
https://lightroom.adobe.com/shares/1538e263cac8794d97758a7785f5783b
https://lightroom.adobe.com/shares/6f66f51c4332604daf872bb156ed358b
https://lightroom.adobe.com/shares/e403a9398f64db4e82e51ca12fccb906
https://lightroom.adobe.com/shares/e76079239497fc45b37cec87a15683f9
https://lightroom.adobe.com/shares/f4930569f4e04941906ea55abbe8f706
https://lightroom.adobe.com/shares/15c225f5e1f90e4083fd60c94fdaa0ce
https://lightroom.adobe.com/shares/799a507ff6394d45994688daaf062c33
https://lightroom.adobe.com/shares/78d0a640404959448afcd8db2288aefd
https://lightroom.adobe.com/shares/f7d6fc02a71de34d811d17b96f6f783e
https://lightroom.adobe.com/shares/f8a17398aeb98143afcfa9ef1c75677a
https://lightroom.adobe.com/shares/0fad108f7a4b4f4d95ecdfacf91bb808
https://lightroom.adobe.com/shares/2168f03be738c040b72ad05aaf404ff0
https://lightroom.adobe.com/shares/498d11325a42a34e8af79d6b8dcc6526
https://lightroom.adobe.com/shares/a6e8ab085a7f0d4f8d6246b07692f31b

雷雨中的崖柏 发表于 8 分钟前

沙发!沙发!
页: [1]
查看完整版本: 控股股东2120万股再上法拍台、过半持股仍被冻结,ST晨鸣前三季度收入却增逾两倍