Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

组件扫描暴露了超危漏洞 #621

Closed
931717907 opened this issue May 9, 2023 · 1 comment
Closed

组件扫描暴露了超危漏洞 #621

931717907 opened this issue May 9, 2023 · 1 comment
Labels
Done

Comments

@931717907
Copy link

Tencent vConsole 3.15.0版本存在安全漏洞，该漏洞源于setOptions中不正确的key和value解析导致存在原型污染问题。

这个能修复吗
@Maizify
Copy link
Collaborator

Maizify commented May 22, 2023

正在处理中。

@Maizify Maizify added the Bug label May 22, 2023
Maizify added a commit that referenced this issue May 22, 2023
@Maizify
Fix(core): Fix prototype pollution in vConsole.setOption(). (issue #…
b915917 
…616 #621)
@Maizify Maizify added Done and removed Bug labels May 22, 2023
@Maizify Maizify closed this as completed Jun 14, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
Done
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@Maizify @931717907