纳斯达克中国金龙指数收涨1.65%

yun2025

纳斯达克中国金龙指数收涨1.65%

lavish-axi：本地编辑器服务未验证请求的站点来源

11月7日公开的漏洞记录CVE-2026-102344涉及lavish-axi。Lavish用于编辑HTML内容，会在本机启动一个供编辑器使用的网络服务。部分请求缺少认证以及对主机和来源的检查。只要服务仍在运行，用户访问的外部网页在特定条件下就可能与本机服务交互，接触会话或作品相关功能。版本清单标出的受影响范围包括低于0.1.43。

这条记录给出的CVSS 3.1基础评分为8.1分，分级为高危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且需要其他用户参与触发。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、无。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU4Nzc1Nzg1Ng==.html
https://v.youku.com/v_show/id_XNjU3ODA1OTM5Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzc1NzY4NA==.html
https://v.youku.com/v_show/id_XNjU4Nzc1MzU2OA==.html
https://v.youku.com/v_show/id_XNjU3ODA1NTExNg==.html
https://v.youku.com/v_show/id_XNjU3ODA1NjU3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODA1MTk2MA==.html
https://v.youku.com/v_show/id_XNjU3ODA1OTIyNA==.html
https://v.youku.com/v_show/id_XNjU4Nzc1MDMwOA==.html
https://v.youku.com/v_show/id_XNjU3ODA1NjM2MA==.html
https://v.youku.com/v_show/id_XNjU3ODA1MzUwNA==.html
https://v.youku.com/v_show/id_XNjU4Nzc1MzQxMg==.html
https://v.youku.com/v_show/id_XNjU4Nzc1MDI4OA==.html
https://v.youku.com/v_show/id_XNjU4Nzc1MzM5Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzc1MDI4MA==.html
https://v.youku.com/v_show/id_XNjU3ODA1NjMyOA==.html
https://v.youku.com/v_show/id_XNjU3ODA1NjI1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODA1NDgxNg==.html
https://v.youku.com/v_show/id_XNjU3ODA1NDgxMg==.html
https://v.youku.com/v_show/id_XNjU4Nzc1NDc4NA==.html
https://v.youku.com/v_show/id_XNjU3ODA1MzMyOA==.html
https://v.youku.com/v_show/id_XNjU4Nzc1MDA5Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzc1NjE1Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzc0ODc4OA==.html
https://v.youku.com/v_show/id_XNjU3ODA1MzE2OA==.html
https://v.youku.com/v_show/id_XNjU3ODA1MzE1Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzc1Mjk4MA==.html
https://v.youku.com/v_show/id_XNjU3ODA1MTQ4OA==.html
https://v.youku.com/v_show/id_XNjU4Nzc0NzE0OA==.html
https://v.youku.com/v_show/id_XNjU3ODA1MDI2OA==.html
https://v.youku.com/v_show/id_XNjU4Nzc0Mzg5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODA1Mjk0NA==.html
https://v.youku.com/v_show/id_XNjU3ODA1MjkwOA==.html
https://v.youku.com/v_show/id_XNjU4Nzc1MTM0OA==.html
https://v.youku.com/v_show/id_XNjU3ODA1MTI4OA==.html
https://v.youku.com/v_show/id_XNjU4Nzc0NjkyMA==.html
https://v.youku.com/v_show/id_XNjU3ODA1MDA2MA==.html
https://v.youku.com/v_show/id_XNjU3ODA0OTk5Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzc0NTM4MA==.html
https://v.youku.com/v_show/id_XNjU4Nzc0ODM3Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzc0NTI0OA==.html
https://v.youku.com/v_show/id_XNjU4Nzc0OTYwNA==.html
https://v.youku.com/v_show/id_XNjU4Nzc0MjIzNg==.html
https://v.youku.com/v_show/id_XNjU3ODA0NjkyOA==.html
https://v.youku.com/v_show/id_XNjU3ODA0OTczMg==.html
https://v.youku.com/v_show/id_XNjU3ODA0NTM0MA==.html
https://v.youku.com/v_show/id_XNjU4Nzc0MjE2MA==.html
https://v.youku.com/v_show/id_XNjU3ODA0ODMxNg==.html
https://v.youku.com/v_show/id_XNjU3ODA0Njg0NA==.html
https://v.youku.com/v_show/id_XNjU4Nzc0NjQ5Ng==.html