埃森哲报告被曝存在虚假引用案例，公司否认系 AI 幻觉所致

yun2025

埃森哲报告被曝存在虚假引用案例，公司否认系 AI 幻觉所致

wanderer：路线下载服务可能代用户访问内部地址

11月7日公开的漏洞记录CVE-2026-71495涉及wanderer。这个自托管应用用于保存和分享户外路线。在特定公开配置下，未登录用户提交给下载功能的地址会被服务器直接访问，返回结果随后交还给请求方。这意味着服务器能接触而普通访客无法直接访问的数据库、搜索服务或云端元数据也可能暴露。版本清单标出的受影响范围包括低于0.20.0。

这条记录给出的CVSS 3.1基础评分为10.0分，分级为严重。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、无、高。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU3ODI3MDUyNA==.html
https://v.youku.com/v_show/id_XNjU4Nzk2MjQ2MA==.html
https://v.youku.com/v_show/id_XNjU4Nzk2MDkxNg==.html
https://v.youku.com/v_show/id_XNjU3ODI2NjAzMg==.html
https://v.youku.com/v_show/id_XNjU3ODI2OTAzNg==.html
https://v.youku.com/v_show/id_XNjU3ODI2NjAwMA==.html
https://v.youku.com/v_show/id_XNjU3ODI2ODkyOA==.html
https://v.youku.com/v_show/id_XNjU3ODI2NTkzNg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1OTkyMA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1OTg5Mg==.html
https://v.youku.com/v_show/id_XNjU3ODI2NTkzMg==.html
https://v.youku.com/v_show/id_XNjU3ODI2NzY0NA==.html
https://v.youku.com/v_show/id_XNjU3ODI2NDQwOA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NTE2NA==.html
https://v.youku.com/v_show/id_XNjU3ODI2MzAwOA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1ODI4NA==.html
https://v.youku.com/v_show/id_XNjU3ODI2MTQ2MA==.html
https://v.youku.com/v_show/id_XNjU3ODI2NDM5Mg==.html
https://v.youku.com/v_show/id_XNjU3ODI2NzU5Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1Njc2OA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1OTg3Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1ODI0OA==.html
https://v.youku.com/v_show/id_XNjU3ODI2Mjk2OA==.html
https://v.youku.com/v_show/id_XNjU3ODI2MTQxMg==.html
https://v.youku.com/v_show/id_XNjU3ODI2ODg2MA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1ODIwOA==.html
https://v.youku.com/v_show/id_XNjU3ODI2NzU1Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1ODE4OA==.html
https://v.youku.com/v_show/id_XNjU3ODI2NTgzMg==.html
https://v.youku.com/v_show/id_XNjU3ODI2NDM0MA==.html
https://v.youku.com/v_show/id_XNjU3ODI2Mjg2MA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NjY5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODI2NzQ2OA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1OTgxNg==.html
https://v.youku.com/v_show/id_XNjU3ODI1OTk4NA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NjY4NA==.html
https://v.youku.com/v_show/id_XNjU3ODI2MTI1Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1OTc4OA==.html
https://v.youku.com/v_show/id_XNjU3ODI2NDI5Mg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NTAwMA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NjY0OA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NDk4NA==.html
https://v.youku.com/v_show/id_XNjU3ODI2NzM2MA==.html
https://v.youku.com/v_show/id_XNjU3ODI2NTc3Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzk1NjYwMA==.html
https://v.youku.com/v_show/id_XNjU3ODI2NDIyMA==.html
https://v.youku.com/v_show/id_XNjU4Nzk1OTcyMA==.html
https://v.youku.com/v_show/id_XNjU3ODI2MTE2OA==.html
https://v.youku.com/v_show/id_XNjU3ODI2NDIxMg==.html
https://v.youku.com/v_show/id_XNjU4Nzk1ODA0NA==.html