南京银行三季报：资产规模与净利润双双增长超8%

yun2025

南京银行三季报：资产规模与净利润双双增长超8%

Kroki：绘图后端安全模式未覆盖全部文件读取操作

11月7日公开的漏洞记录CVE-2026-102359涉及Kroki。Kroki可将文字描述转换成图形。处理TikZ图表时，特定安全检查只拦截了一种文件读取方式，排版引擎还有其他读取操作可用。向绘图接口提交的内容因此可能接触服务器上的文件，即使部署者已经启用了预期用于隔离输入的安全模式。版本清单标出的受影响范围包括低于0.31.2。

这条记录给出的CVSS 3.1基础评分为7.5分，分级为高危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、无、无。评分把利用复杂度列为较低，所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU4ODc1Njc2NA==.html
https://v.youku.com/v_show/id_XNjU4ODc2Mjc4OA==.html
https://v.youku.com/v_show/id_XNjU4ODc1OTgxNg==.html
https://v.youku.com/v_show/id_XNjU4ODc2MTE3Ng==.html
https://v.youku.com/v_show/id_XNjU3OTA4MjIxNg==.html
https://v.youku.com/v_show/id_XNjU4ODc1ODE2MA==.html
https://v.youku.com/v_show/id_XNjU3OTA4MDcxMg==.html
https://v.youku.com/v_show/id_XNjU3OTA4NDgwNA==.html
https://v.youku.com/v_show/id_XNjU3OTA4MzMyNA==.html
https://v.youku.com/v_show/id_XNjU3OTA3OTE1Ng==.html
https://v.youku.com/v_show/id_XNjU3OTA3OTA4OA==.html
https://v.youku.com/v_show/id_XNjU3OTA4MDYyMA==.html
https://v.youku.com/v_show/id_XNjU3OTA3OTA1Mg==.html
https://v.youku.com/v_show/id_XNjU4ODc1ODAzNg==.html
https://v.youku.com/v_show/id_XNjU4ODc2MDkyNA==.html
https://v.youku.com/v_show/id_XNjU4ODc1OTQxMg==.html
https://v.youku.com/v_show/id_XNjU4ODc1OTM1Mg==.html
https://v.youku.com/v_show/id_XNjU4ODc1MzUzNg==.html
https://v.youku.com/v_show/id_XNjU4ODc1MzQ1Mg==.html
https://v.youku.com/v_show/id_XNjU4ODc1OTI1Mg==.html
https://v.youku.com/v_show/id_XNjU3OTA3ODgyOA==.html
https://v.youku.com/v_show/id_XNjU4ODc1NDU4NA==.html
https://v.youku.com/v_show/id_XNjU3OTA4MDI1Mg==.html
https://v.youku.com/v_show/id_XNjU3OTA4MTY4OA==.html
https://v.youku.com/v_show/id_XNjU4ODc1MTU2MA==.html
https://v.youku.com/v_show/id_XNjU4ODc1MTU0MA==.html
https://v.youku.com/v_show/id_XNjU4ODc0ODY2MA==.html
https://v.youku.com/v_show/id_XNjU3OTA3NTk3Ng==.html
https://v.youku.com/v_show/id_XNjU4ODc1MzE1Ng==.html
https://v.youku.com/v_show/id_XNjU4ODc1MzAyNA==.html
https://v.youku.com/v_show/id_XNjU4ODc0ODQ3Ng==.html
https://v.youku.com/v_show/id_XNjU4ODc1MzAwMA==.html
https://v.youku.com/v_show/id_XNjU4ODc1Mjk4MA==.html
https://v.youku.com/v_show/id_XNjU3OTA3MTEyMA==.html
https://v.youku.com/v_show/id_XNjU4ODc0NzEzMg==.html
https://v.youku.com/v_show/id_XNjU4ODc0NzExMg==.html
https://v.youku.com/v_show/id_XNjU4ODc1MTIzNg==.html
https://v.youku.com/v_show/id_XNjU4ODc0ODI4MA==.html
https://v.youku.com/v_show/id_XNjU3OTA3NDA0MA==.html
https://v.youku.com/v_show/id_XNjU3OTA2NjM5Mg==.html
https://v.youku.com/v_show/id_XNjU3OTA3MjM1Ng==.html
https://v.youku.com/v_show/id_XNjU3OTA3Njk0NA==.html
https://v.youku.com/v_show/id_XNjU3OTA3Njg3Ng==.html
https://v.youku.com/v_show/id_XNjU3OTA3MDY4NA==.html
https://v.youku.com/v_show/id_XNjU3OTA2NDczNg==.html
https://v.youku.com/v_show/id_XNjU3OTA2NDczMg==.html
https://v.youku.com/v_show/id_XNjU3OTA2OTExNg==.html
https://v.youku.com/v_show/id_XNjU3OTA2OTExMg==.html
https://v.youku.com/v_show/id_XNjU3OTA2NjAwOA==.html
https://v.youku.com/v_show/id_XNjU3OTA2NzQ2MA==.html