西南头部租车公司大手笔：购入100台享界G9、10台智界V9

yun2025

西南头部租车公司大手笔：购入100台享界G9、10台智界V9

Symfony：对象反序列化可越过嵌套属性的忽略设置

11月7日公开的漏洞记录CVE-2026-122053涉及Symfony。Symfony的序列化组件会把某些带分隔符的字段名理解为对象属性路径。处理不可信输入时，原本应排除的嵌套字段可能沿这条路径被写入。问题涉及多个维护分支，应用是否将外部输入交由相应对象正规化器处理，是判断暴露面的相关条件。版本清单标出的受影响范围包括5.4.41起至5.4.56之前、6.4.9起至6.4.50之前、7.0.9起至7.1.0之前、7.1.2起至7.4.23之前、8.0.0起至8.1.11之前。

这条记录给出的CVSS 3.1基础评分为6.5分，分级为中危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为低、低、无。

https://v.youku.com/v_show/id_XNjU4Nzk2NTcxMg==.html
https://v.youku.com/v_show/id_XNjU4Nzk2NTcwNA==.html
https://v.youku.com/v_show/id_XNjU4Nzk2MTEzMg==.html
https://v.youku.com/v_show/id_XNjU3ODI3MDY4NA==.html
https://v.youku.com/v_show/id_XNjU3ODI2NDY2NA==.html
https://v.youku.com/v_show/id_XNjU3ODI3MDY2MA==.html
https://v.youku.com/v_show/id_XNjU3ODI2NjIwOA==.html
https://v.youku.com/v_show/id_XNjU3ODI2Nzc0OA==.html
https://v.youku.com/v_show/id_XNjU4Nzk2MDk0MA==.html
https://v.youku.com/v_show/id_XNjU4Nzk2MDkzNg==.html
https://v.youku.com/v_show/id_XNjU4Nzk2MDkyOA==.html
https://v.youku.com/v_show/id_XNjU4Nzk2MDkwOA==.html
https://v.youku.com/v_show/id_XNjU3ODI2NzcyMA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NTE0MA==.html
https://v.youku.com/v_show/id_XNjU3ODI2Mjk5Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NTEzMg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1ODI1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODI2ODg1Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzk1OTg2MA==.html
https://v.youku.com/v_show/id_XNjU3ODI2ODg0NA==.html
https://v.youku.com/v_show/id_XNjU3ODI2MTIwOA==.html
https://v.youku.com/v_show/id_XNjU3ODI2MjczNg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NDk0NA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1ODA1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODI2MjcxNg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NDkyOA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MzU4MA==.html
https://v.youku.com/v_show/id_XNjU3ODI2MjUyMA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MzU2OA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NDc4OA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NDc4NA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MzUyOA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NjIzNg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1OTMxNg==.html
https://v.youku.com/v_show/id_XNjU3ODI1ODEyMA==.html
https://v.youku.com/v_show/id_XNjU3ODI1ODEwNA==.html
https://v.youku.com/v_show/id_XNjU3ODI1ODEwMA==.html
https://v.youku.com/v_show/id_XNjU3ODI1OTQ2NA==.html
https://v.youku.com/v_show/id_XNjU3ODI1MzU5Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MzIxNg==.html
https://v.youku.com/v_show/id_XNjU3ODI1NjU2MA==.html
https://v.youku.com/v_show/id_XNjU4Nzk0ODc5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODI1Nzg1Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MDA2MA==.html
https://v.youku.com/v_show/id_XNjU4Nzk0NzEwOA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1MDAzMg==.html
https://v.youku.com/v_show/id_XNjU4Nzk0NzA3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODI1NjQyNA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1Mjk1Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzk0OTgyMA==.html