¡¾Îó²îͨ¸æ¡¿XWiki Details SummaryºêÔ¶³Ì´úÂëÖ´ÐÐÎó²î(CVE-2025-65036)
Ðû²¼Ê±¼ä 2025-12-08Ò»¡¢Îó²î¸ÅÊö
Îó²îÃû³Æ | XWiki-pro-macros Details SummaryºêÔ¶³Ì´úÂëÖ´ÐÐÎó²î | ||
CVE ID | CVE-2025-65036 | ||
Îó²îÀàÐÍ | RCE | ·¢Ã÷ʱ¼ä | 2025-12-8 |
Îó²îÆÀ·Ö | 8.3 | Îó²îÆ·¼¶ | ¸ßΣ |
¹¥»÷ÏòÁ¿ | ÍøÂç | ËùÐèȨÏÞ | µÍ |
ʹÓÃÄÑ¶È | µÍ | Óû§½»»¥ | ²»ÐèÒª |
PoC/EXP | ÒѹûÕæ | ÔÚҰʹÓà | δ·¢Ã÷ |
XWikiÊÇÒ»¸ö¿ªÔ´µÄÆóÒµ¼¶ÖªÊ¶ÖÎÀíºÍÐ×÷ƽ̨£¬£¬£¬ £¬£¬£¬ÔÊÐíÓû§½¨Éè¡¢ÖÎÀíºÍ¹²ÏíÄÚÈÝ¡£¡£¡£Ëü»ùÓÚJavaºÍHibernate¹¹½¨£¬£¬£¬ £¬£¬£¬¾ßÓÐÇ¿Ê¢µÄ¿ÉÀ©Õ¹ÐÔºÍÎÞаµÄȨÏÞ¿ØÖÆ»úÖÆ£¬£¬£¬ £¬£¬£¬Ö§³Ö×Ô½ç˵À©Õ¹ºÍ¼¯³É¡£¡£¡£XWikiÖ÷ÒªÓÃÓÚÎĵµÖÎÀí¡¢ÏîÄ¿Ð×÷ºÍ֪ʶ¿â½¨É裬£¬£¬ £¬£¬£¬ÆÕ±éÓ¦ÓÃÓÚÆóÒµ¡¢×éÖ¯ºÍ¿ª·¢ÕßÉçÇø¡£¡£¡£ËüÌṩÁ˸»ºñµÄ²å¼þºÍÄ£°å£¬£¬£¬ £¬£¬£¬¿ÉÒÔÖª×ã²î±ðÆóÒµµÄÐèÇ󣬣¬£¬ £¬£¬£¬²¢Ö§³Ö¶àÖÖÃûÌõÄÄÚÈÝչʾ¡£¡£¡£XWikiµÄ¿ª·ÅÔ´´úÂëʹµÃÓû§¿ÉÒÔ×ÔÓɶ¨ÖƲ¢¾ÙÐжþ´Î¿ª·¢¡£¡£¡£
2025Äê12ÔÂ8ÈÕ£¬£¬£¬ £¬£¬£¬¼øºÚµ£±£Íø¼¯ÍÅVSRC¼à²âµ½XWiki-pro-macros Details SummaryºêÔ¶³Ì´úÂëÖ´ÐÐÎó²î£¬£¬£¬ £¬£¬£¬Ó°Ïìcom.xwiki.pro:xwiki-pro-macros-confluence-bridges-ui°ü£¬£¬£¬ £¬£¬£¬¸ÃÎó²îÔ´ÓÚConfluenceµÄDetails SummaryºêµÄʵÏÖÎÊÌ⣬£¬£¬ £¬£¬£¬ºêÔÚÖ´ÐÐVelocity¾ç±¾Ê±Î´¾ÙÐÐÊʵ±µÄȨÏÞ¼ì²é£¬£¬£¬ £¬£¬£¬µ¼ÖÂδÊÚȨµÄÓû§Äܹ»Í¨¹ý½á¹¹Ìض¨Ò³ÃæÄÚÈÝ£¬£¬£¬ £¬£¬£¬´¥·¢Ô¶³Ì´úÂëÖ´ÐС£¡£¡£¹¥»÷Õß¿ÉÒÔͨ¹ý½¨ÉèÒ»¸ö°üÀ¨Groovy´úÂëµÄÒì²½ºêµÄÏêÇéºêÒ³Ã棬£¬£¬ £¬£¬£¬ËæºóÓÉÖÎÀíÔ±½«¸ÃÒ³Ãæͨ¹ýDetails Summaryºê°üÀ¨µ½ÆäËûÒ³ÃæÖУ¬£¬£¬ £¬£¬£¬´Ó¶øÖ´ÐжñÒâ´úÂë¡£¡£¡£¸ÃÎó²î¿Éµ¼Ö¹¥»÷ÕßÔÚûÓбà³ÌȨÏÞµÄÇéÐÎÏ£¬£¬£¬ £¬£¬£¬Í¨¹ý½á¹¹Ìض¨Ò³ÃæÄÚÈݾÙÐжñÒâ²Ù×÷£¬£¬£¬ £¬£¬£¬´Ó¶øÔÚϵͳÖÐÖ´ÐÐδ¾ÊÚȨµÄ´úÂ룬£¬£¬ £¬£¬£¬½ø¶øΣº¦ÏµÍ³Çå¾²¡£¡£¡£
¶þ¡¢Ó°Ïì¹æÄ£
Èý¡¢Çå¾²²½·¥
3.1 Éý¼¶°æ±¾
ÏÂÔØÁ´½Ó£ºhttps://github.com/xwikisas/xwiki-pro-macros/tags/
¾©¹«Íø°²±¸11010802024551ºÅ