¡¾·ì϶¹«¸æ¡¿XWiki Details SummaryºêÔ¶³Ì´úÂëÖ´Ðзì϶(CVE-2025-65036)
°ä²¼¹¦·ò 2025-12-08Ò»¡¢·ì϶¸ÅÊö
·ìϼûû³Æ | XWiki-pro-macros Details SummaryºêÔ¶³Ì´úÂëÖ´Ðзì϶ | ||
CVE ID | CVE-2025-65036 | ||
·ì϶ÀàÐÍ | RCE | ·¢ÏÖ¹¦·ò | 2025-12-8 |
·ì϶ÆÀ·Ö | 8.3 | ·ì϶µÈ¼¶ | ¸ßΣ |
¹¥»÷ÏòÁ¿ | ÍøÂç | ËùÐèȨÏÞ | µÍ |
ÀûÓÃÄÑ¶È | µÍ | Óû§½»»¥ | ²»±ØÒª |
PoC/EXP | Òѹ«¿ª | ÔÚÒ°ÀûÓà | δ·¢ÏÖ |
XWikiÊÇÒ»¸ö¿ªÔ´µÄÆóÒµ¼¶ÖªÊ¶ÖÎÀíºÍºÏ×÷ƽ̨£¬ £¬£¬£¬£¬ £¬ÔÊÐíÓû§´´½¨¡¢ÖÎÀíºÍ¹²ÏíÄÚÈÝ¡£¡£¡£¡£ ¡£Ëü»ùÓÚJavaºÍHibernate¹¹½¨£¬ £¬£¬£¬£¬ £¬ÓµÓÐ׳´óµÄ¿ÉÀ©´óÐԺͽýݵÄȨÏÞ½ÚÔì»úÔ죬 £¬£¬£¬£¬ £¬Ö§³Ö×Ô½ç˵À©´óºÍ¼¯³É¡£¡£¡£¡£ ¡£XWikiÖØÒªÓÃÓÚÎĵµÖÎÀí¡¢ÏîÄ¿ºÏ×÷ºÍ֪ʶ¿â½¨É裬 £¬£¬£¬£¬ £¬¿í·ºÀûÓÃÓÚÆóÒµ¡¢×éÖ¯ºÍ¿ª·¢ÕßÉçÇø¡£¡£¡£¡£ ¡£ËüÌṩÁË·á˶µÄ²å¼þºÍÄ£°å£¬ £¬£¬£¬£¬ £¬Äܹ»Âú×ã·ÖÆçÆóÒµµÄÐèÒª£¬ £¬£¬£¬£¬ £¬²¢Ö§³Ö¶àÖÖÌåʽµÄÄÚÈÝչʾ¡£¡£¡£¡£ ¡£XWikiµÄÊ¢¿ªÔ´´úÂëʹµÃÓû§Äܹ»×ÔÓɶ¨Ôì²¢½øÐжþ´Î¿ª·¢¡£¡£¡£¡£ ¡£
2025Äê12ÔÂ8ÈÕ£¬ £¬£¬£¬£¬ £¬8827Ì«Ñô¼¯Íż¯ÍÅVSRC¼à²âµ½XWiki-pro-macros Details SummaryºêÔ¶³Ì´úÂëÖ´Ðзì϶£¬ £¬£¬£¬£¬ £¬Ó°Ïìcom.xwiki.pro:xwiki-pro-macros-confluence-bridges-ui°ü£¬ £¬£¬£¬£¬ £¬¸Ã·ì϶ԴÓÚConfluenceµÄDetails SummaryºêµÄʵÏÖÎÊÌ⣬ £¬£¬£¬£¬ £¬ºêÔÚÖ´ÐÐVelocity¾ç±¾Ê±Î´½øÐÐÊʵ±µÄȨÏ޲鳣¬ £¬£¬£¬£¬ £¬µ¼ÖÂδÊÚȨµÄÓû§¿ÉÄÜͨ¹ý»ú¹ØÌض¨Ò³ÃæÄÚÈÝ£¬ £¬£¬£¬£¬ £¬´¥·¢Ô¶³Ì´úÂëÖ´ÐС£¡£¡£¡£ ¡£¹¥»÷ÕßÄܹ»Í¨¹ý´´½¨Ò»¸öÔ̺¬Groovy´úÂëµÄÒì²½ºêµÄÏêÇéºêÒ³Ã棬 £¬£¬£¬£¬ £¬ËæºóÓÉÖÎÀíÔ±½«¸ÃÒ³Ãæͨ¹ýDetails SummaryºêÔ̺¬µ½ÆäËûÒ³ÃæÖУ¬ £¬£¬£¬£¬ £¬´Ó¶øÖ´ÐжñÒâ´úÂë¡£¡£¡£¡£ ¡£¸Ã·ì϶¿Éµ¼Ö¹¥»÷ÕßÔÚûÓбà³ÌȨÏÞµÄÇé¿öÏ£¬ £¬£¬£¬£¬ £¬Í¨¹ý»ú¹ØÌض¨Ò³ÃæÄÚÈݽøÐжñÒâ²Ù×÷£¬ £¬£¬£¬£¬ £¬´Ó¶øÔÚϵͳÖÐÖ´ÐÐδ¾ÊÚȨµÄ´úÂ룬 £¬£¬£¬£¬ £¬½ø¶ø·çÏÕϵͳ°²È«¡£¡£¡£¡£ ¡£
¶þ¡¢Ó°ÏìÁìÓò
Èý¡¢°²È«´ëÊ©
3.1 Éý¼¶°æ±¾
ÏÂÔØÁ´½Ó£ºhttps://github.com/xwikisas/xwiki-pro-macros/tags/
¾©¹«Íø°²±¸11010802024551ºÅ