yun2026 发表于 3 天前

毕马威:跨国企业对中国经济前景及自身在华业务表现更加乐观

毕马威:跨国企业对中国经济前景及自身在华业务表现更加乐观

Symfony:对象反序列化可越过嵌套属性的忽略设置

11月7日公开的漏洞记录CVE-2026-122053涉及Symfony。Symfony的序列化组件会把某些带分隔符的字段名理解为对象属性路径。处理不可信输入时,原本应排除的嵌套字段可能沿这条路径被写入。问题涉及多个维护分支,应用是否将外部输入交由相应对象正规化器处理,是判断暴露面的相关条件。版本清单标出的受影响范围包括5.4.41起至5.4.56之前、6.4.9起至6.4.50之前、7.0.9起至7.1.0之前、7.1.2起至7.4.23之前、8.0.0起至8.1.11之前。

这条记录给出的CVSS 3.1基础评分为6.5分,分级为中危。按照评分列出的条件,利用者可通过网络接触相关功能,不以事先取得系统权限为必要条件,并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为低、低、无。

https://lightroom.adobe.com/shares/99a6962c50c15e42a6f34ac4733f032f
https://lightroom.adobe.com/shares/7ed9a665bff800468e7a75cc35d2db78
https://lightroom.adobe.com/shares/d5880eec9a1abc43b15b592c8df19da6
https://lightroom.adobe.com/shares/3a6c961fb955bd4b9858de0d5509d013
https://lightroom.adobe.com/shares/aeef00d5bbfd174089b3dbb8ad79eed1
https://lightroom.adobe.com/shares/68ebf4256f93b441ad2571e2f1bbbd68
https://lightroom.adobe.com/shares/0fca86bf604169439a97b724254d097c
https://lightroom.adobe.com/shares/3ef7815a897b004b92b23db6ab69574d
https://lightroom.adobe.com/shares/d01284c0ce6c6b4f81f7c558002c6294
https://lightroom.adobe.com/shares/7217d51c533f2242b52b8dbf9e086b8b
https://lightroom.adobe.com/shares/a8f76ca77524364db87fda717aa1176f
https://lightroom.adobe.com/shares/024f51b0bcece14290af4825cc2e93a0
https://lightroom.adobe.com/shares/00106dd69799434b879f2b24d9cba596
https://lightroom.adobe.com/shares/2343f114b1e93943b3bc4475b4570bdc
https://lightroom.adobe.com/shares/c00d9546bdbfb349b7ddf6e197f5912d
https://lightroom.adobe.com/shares/0c76e1d3a2a9084fb4755a0a69498ddb
https://lightroom.adobe.com/shares/bb1968909b35744893bbaf78bdcb9072
https://lightroom.adobe.com/shares/347f788993d9e544a64348cbfc2105df
https://lightroom.adobe.com/shares/4f7c312c5c982a418ba51e8654e2bacf
https://lightroom.adobe.com/shares/8d5223211b94bd4da8b184d2b78b3083
https://lightroom.adobe.com/shares/0ded1b1fddf6344fb5b6e8a36940d5dd
https://lightroom.adobe.com/shares/420257dba151d145ad7aa246aa79deff
https://lightroom.adobe.com/shares/8509b9021df9834ba2e98ee982cef371
https://lightroom.adobe.com/shares/d4fb887327f8f042ac5c0a5356de3c84
https://lightroom.adobe.com/shares/89ad4e7e3b806548a6e08c1cf63d8090
https://lightroom.adobe.com/shares/a1e88d993878724590b57c9a3fe3afc7
https://lightroom.adobe.com/shares/477aac60ea5b154f81318abf3816e586
https://lightroom.adobe.com/shares/58e03c9c67bc004d93331960dd3535c0
https://lightroom.adobe.com/shares/fb0ca1a7c55b5b42a863bd259a0c5327
https://lightroom.adobe.com/shares/18709fcb04592b4298974c12d8ee2035
https://lightroom.adobe.com/shares/c2f5c2807b86744a8460f5aa81ba02f0
https://lightroom.adobe.com/shares/61d494051ac17141ba77cb98e339ff1e
https://lightroom.adobe.com/shares/dc1e3e3a4faa0d47acee89926d4a35fe
https://lightroom.adobe.com/shares/df9cd75b16c26e40923e683261c7d3e7
https://lightroom.adobe.com/shares/c61d11ea8a2db949a726ffd63ef934e6
https://lightroom.adobe.com/shares/6bd6e9e0935f7442969c6ee9fc84d39b
https://lightroom.adobe.com/shares/0287999f6480ba4fa8667b188ebad212
https://lightroom.adobe.com/shares/af196c1fe9aeed4884da32eb47f4b706
https://lightroom.adobe.com/shares/296dc1652ef0e54dae77945b12681647
https://lightroom.adobe.com/shares/ea504f94c7e9e84385963e34d8581b41
https://lightroom.adobe.com/shares/c76a5ec350d73740b80a3af5eb86dbf5
https://lightroom.adobe.com/shares/ffb7932569624946811702df1e42e54e
https://lightroom.adobe.com/shares/4681bc63f2ba984b838288a80232680d
https://lightroom.adobe.com/shares/749dfe96cdf5084480e9dee186f7dc69
https://lightroom.adobe.com/shares/49d1ac3f92e31f4d9f96adea6a0f8ff8
https://lightroom.adobe.com/shares/c225eeafa2b5c148b49c04ed7c8ca1cd
https://lightroom.adobe.com/shares/1d172533b3f8fd44b476f5c77bf329b8
https://lightroom.adobe.com/shares/4ae5cb6212a3294c9e74715e90187ef8
https://lightroom.adobe.com/shares/93eeee713b117e4b9fae86126f8d9193
https://lightroom.adobe.com/shares/700edf2a541bc24b9156f8ee2666b1d7
页: [1]
查看完整版本: 毕马威:跨国企业对中国经济前景及自身在华业务表现更加乐观