“万亿俱乐部”迎扩容潮：五年有望新增14个万亿城市，长三角6城集体冲刺
“万亿俱乐部”迎扩容潮：五年有望新增14个万亿城市，长三角6城集体冲刺Symfony：对象反序列化可越过嵌套属性的忽略设置
11月7日公开的漏洞记录CVE-2026-122053涉及Symfony。Symfony的序列化组件会把某些带分隔符的字段名理解为对象属性路径。处理不可信输入时，原本应排除的嵌套字段可能沿这条路径被写入。问题涉及多个维护分支，应用是否将外部输入交由相应对象正规化器处理，是判断暴露面的相关条件。版本清单标出的受影响范围包括5.4.41起至5.4.56之前、6.4.9起至6.4.50之前、7.0.9起至7.1.0之前、7.1.2起至7.4.23之前、8.0.0起至8.1.11之前。
这条记录给出的CVSS 3.1基础评分为6.5分，分级为中危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为低、低、无。
https://v.youku.com/v_show/id_XNjU3ODEzNzYwOA==.html
https://v.youku.com/v_show/id_XNjU3ODEzNDc0MA==.html
https://v.youku.com/v_show/id_XNjU3ODEzMTk4NA==.html
https://v.youku.com/v_show/id_XNjU3ODEzNDcyNA==.html
https://v.youku.com/v_show/id_XNjU4NzgyMzM3Ng==.html
https://v.youku.com/v_show/id_XNjU4NzgyMzM3Mg==.html
https://v.youku.com/v_show/id_XNjU4NzgyMDY0OA==.html
https://v.youku.com/v_show/id_XNjU3ODEzMTg3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODEzMDEyMA==.html
https://v.youku.com/v_show/id_XNjU3ODEzNDU2NA==.html
https://v.youku.com/v_show/id_XNjU3ODEzNDU1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODEyNjk3Ng==.html
https://v.youku.com/v_show/id_XNjU4NzgyMDM4MA==.html
https://v.youku.com/v_show/id_XNjU4NzgxNzQ5Mg==.html
https://v.youku.com/v_show/id_XNjU4NzgyMTY4MA==.html
https://v.youku.com/v_show/id_XNjU4NzgyMTY1Ng==.html
https://v.youku.com/v_show/id_XNjU4NzgyMTY0NA==.html
https://v.youku.com/v_show/id_XNjU4NzgyMTY0MA==.html
https://v.youku.com/v_show/id_XNjU3ODEzMTczMg==.html
https://v.youku.com/v_show/id_XNjU4NzgxOTE2MA==.html
https://v.youku.com/v_show/id_XNjU4NzgxNzQ3Mg==.html
https://v.youku.com/v_show/id_XNjU4NzgyMTYyMA==.html
https://v.youku.com/v_show/id_XNjU4NzgxOTEyOA==.html
https://v.youku.com/v_show/id_XNjU3ODEyNjkxNg==.html
https://v.youku.com/v_show/id_XNjU3ODEzMDA0OA==.html
https://v.youku.com/v_show/id_XNjU3ODEzMjk0MA==.html
https://v.youku.com/v_show/id_XNjU3ODEyNjkwOA==.html
https://v.youku.com/v_show/id_XNjU3ODEyOTk3Mg==.html
https://v.youku.com/v_show/id_XNjU4NzgxODgyNA==.html
https://v.youku.com/v_show/id_XNjU3ODEzMTQyOA==.html
https://v.youku.com/v_show/id_XNjU3ODEyOTg4MA==.html
https://v.youku.com/v_show/id_XNjU3ODEyODI3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODEzMTM3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODEyMzk0NA==.html
https://v.youku.com/v_show/id_XNjU3ODEyNjcxNg==.html
https://v.youku.com/v_show/id_XNjU3ODEyODMyOA==.html
https://v.youku.com/v_show/id_XNjU4NzgxNzMwOA==.html
https://v.youku.com/v_show/id_XNjU4NzgxODc1Ng==.html
https://v.youku.com/v_show/id_XNjU3ODEyODI4OA==.html
https://v.youku.com/v_show/id_XNjU4NzgxODY4NA==.html
https://v.youku.com/v_show/id_XNjU4NzgxODY0MA==.html
https://v.youku.com/v_show/id_XNjU3ODEyNjYwNA==.html
https://v.youku.com/v_show/id_XNjU4NzgxNTc5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODEyNTEzMg==.html
https://v.youku.com/v_show/id_XNjU4NzgxODUwMA==.html
https://v.youku.com/v_show/id_XNjU3ODEyMjI5Mg==.html
https://v.youku.com/v_show/id_XNjU3ODEyNjU1Ng==.html
https://v.youku.com/v_show/id_XNjU3ODEyOTY2NA==.html
https://v.youku.com/v_show/id_XNjU4NzgxNTc0MA==.html
https://v.youku.com/v_show/id_XNjU3ODEyODA2MA==.html
页:
[1]