机械革命推出无界15X暴风雪电竞版，首发价6499元

yun2025

机械革命推出无界15X暴风雪电竞版，首发价6499元

Kroki：绘图后端安全模式未覆盖全部文件读取操作

11月7日公开的漏洞记录CVE-2026-102359涉及Kroki。Kroki可将文字描述转换成图形。处理TikZ图表时，特定安全检查只拦截了一种文件读取方式，排版引擎还有其他读取操作可用。向绘图接口提交的内容因此可能接触服务器上的文件，即使部署者已经启用了预期用于隔离输入的安全模式。版本清单标出的受影响范围包括低于0.31.2。

这条记录给出的CVSS 3.1基础评分为7.5分，分级为高危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、无、无。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU4NzkwODUyOA==.html
https://v.youku.com/v_show/id_XNjU4NzkwODUwNA==.html
https://v.youku.com/v_show/id_XNjU4NzkxMTQ4MA==.html
https://v.youku.com/v_show/id_XNjU4NzkwODQ2OA==.html
https://v.youku.com/v_show/id_XNjU3ODIyNjI0NA==.html
https://v.youku.com/v_show/id_XNjU4NzkxMTQ2MA==.html
https://v.youku.com/v_show/id_XNjU3ODIyNDYyOA==.html
https://v.youku.com/v_show/id_XNjU4NzkwOTc4NA==.html
https://v.youku.com/v_show/id_XNjU3ODIyMzE1Ng==.html
https://v.youku.com/v_show/id_XNjU3ODIyMzE1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODIyOTE5Mg==.html
https://v.youku.com/v_show/id_XNjU4NzkwNjg2NA==.html
https://v.youku.com/v_show/id_XNjU3ODIyNzYwNA==.html
https://v.youku.com/v_show/id_XNjU3ODIyMzA5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODIyOTExNg==.html
https://v.youku.com/v_show/id_XNjU3ODIyOTEwMA==.html
https://v.youku.com/v_show/id_XNjU4NzkwODAxNg==.html
https://v.youku.com/v_show/id_XNjU4NzkwMzgzMg==.html
https://v.youku.com/v_show/id_XNjU3ODIyMjc2NA==.html
https://v.youku.com/v_show/id_XNjU4NzkwMzc4NA==.html
https://v.youku.com/v_show/id_XNjU3ODIxODM4OA==.html
https://v.youku.com/v_show/id_XNjU4NzkwNjQzMg==.html
https://v.youku.com/v_show/id_XNjU4NzkwNTA3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODIyMTE0MA==.html
https://v.youku.com/v_show/id_XNjU4NzkwNTAzMg==.html
https://v.youku.com/v_show/id_XNjU3ODIxNjUyMA==.html
https://v.youku.com/v_show/id_XNjU4NzkwNTAxNg==.html
https://v.youku.com/v_show/id_XNjU3ODIxNjQ3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODIxNTA5Mg==.html
https://v.youku.com/v_show/id_XNjU3ODIxNDk0NA==.html
https://v.youku.com/v_show/id_XNjU3ODIxOTIyMA==.html
https://v.youku.com/v_show/id_XNjU3ODIxNDg4OA==.html
https://v.youku.com/v_show/id_XNjU4NzkwMTc0MA==.html
https://v.youku.com/v_show/id_XNjU3ODIxMTk4NA==.html
https://v.youku.com/v_show/id_XNjU4Nzg5NzQ1Ng==.html
https://v.youku.com/v_show/id_XNjU3ODIxMTk2NA==.html
https://v.youku.com/v_show/id_XNjU3ODIxNDgxNg==.html
https://v.youku.com/v_show/id_XNjU3ODIxMzI3Mg==.html
https://v.youku.com/v_show/id_XNjU4NzkwMDAzMg==.html
https://v.youku.com/v_show/id_XNjU3ODIwNzA3Ng==.html
https://v.youku.com/v_show/id_XNjU4Nzg5ODQ3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODIwODQ2NA==.html
https://v.youku.com/v_show/id_XNjU4Nzg5ODQxMg==.html
https://v.youku.com/v_show/id_XNjU3ODIxMzA1Mg==.html
https://v.youku.com/v_show/id_XNjU3ODIwNzAwOA==.html
https://v.youku.com/v_show/id_XNjU3ODIwNTQzMg==.html
https://v.youku.com/v_show/id_XNjU3ODIwMzc2NA==.html
https://v.youku.com/v_show/id_XNjU3ODIwODIyMA==.html
https://v.youku.com/v_show/id_XNjU3ODIwMzc0OA==.html
https://v.youku.com/v_show/id_XNjU4Nzg5MjY4MA==.html