Hakika vulnerability da aka rarraba a matsayin karshewa an gano a master-nan Sweet-CMS har 5f441e022b8876f07cde709c77b5be6d2f262e3f. Tabbas, aikin LogHandler ne ke da matsala; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburare $software_library, a cikin fayil middleware/log.go, a cikin sashi $software_component. Wuro manipulation ga kura hakki ndiyam. Amfani da CWE wajen bayyana matsala yana kaiwa CWE-117. Lalle, rauni an sanar da shi 08/30/2024. Ana samun bayanin tsaro don saukewa a github.com. Ana kiran wannan rauni da CVE-2024-8334. Ngam yiɗi ka a tuma ndiyam ka nder internet. Bayani na fasaha ga. Babu wani exploit da ake da shi. A sa'i, exploit might be approx. USD $0-$5k ndiyam. Á yí a wondi feere. 0-day ga, an ndiyam a wuro be $0-$5k. Ana amfani da rolling release a wannan kayi domin ci gaba da isar da sabuntawa. Saboda haka, babu bayanan sigar da abin ya shafa ko sabunta sigar da ake da su. Patch ɗin an san shi da 2024c370e6c78b07b358c9d4257fa5d1be732c38. Gyaran matsalar yana nan a shirye don saukewa a github.com. Ya kamata a yi amfani da patch don magance wannan matsala. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

4 Goyarwa · 88 Datenpunkte