{"id":52741,"date":"2019-11-15T00:00:00","date_gmt":"2019-11-14T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/github-initsiiroval-proekt-poiska-uyazvimostej-v-otkrytom-po"},"modified":"2020-02-18T14:00:32","modified_gmt":"2020-02-18T11:00:32","slug":"github-initsiiroval-proekt-poiska-uyazvimostej-v-otkrytom-po","status":"publish","type":"post","link":"https:\/\/prohoster.info\/az\/blog\/novosti-interneta\/github-initsiiroval-proekt-poiska-uyazvimostej-v-otkrytom-po","title":{"rendered":"GitHub a\u00e7\u0131q proqram t\u0259minatlar\u0131nda t\u0259hl\u00fck\u0259sizlik bo\u015fluqlar\u0131n\u0131 axtarma layih\u0259si ba\u015flatd\u0131","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

G\u00f6r\u00fcn\u00fcr ki, GitHub proqram t\u0259minat\u0131n\u0131n t\u0259hl\u00fck\u0259sizliyin\u0259 ciddi yana\u015f\u0131r. \u018fvv\u0259lc\u0259, \u015epikserd\u0259 veril\u0259nl\u0259r anbar\u0131 yarad\u0131ld\u0131 v\u0259 layih\u0259<\/a><\/noindex> t\u0259rtibat\u00e7\u0131lar\u0131n maliyy\u0259l\u0259\u015fdirilm\u0259sini t\u0259min etdil\u0259r. \u0130ndi is\u0259 g\u00f6r\u00fcnd\u00fc<\/a><\/noindex> GitHub Security Lab t\u0259\u015f\u0259bb\u00fcs\u00fc, a\u00e7\u0131q m\u0259nb\u0259li proqram t\u0259minat\u0131n\u0131n t\u0259hl\u00fck\u0259sizliyinin art\u0131r\u0131lmas\u0131nda maraql\u0131 olan b\u00fct\u00fcn m\u00fct\u0259x\u0259ssisl\u0259rin i\u015ftirak\u0131n\u0131 n\u0259z\u0259rd\u0259 tutur.<\/p>\n

\"GitHub<\/p>\n

Bu t\u0259\u015f\u0259bb\u00fcsd\u0259 F5, Google, HackerOne, Intel, IOActive, J.P. Morgan, LinkedIn, Microsoft, Mozilla, NCC Group, Oracle, Trail of Bits, Uber v\u0259 VMWare i\u015ftirak edirl\u0259r. Onlar son iki ild\u0259 bir s\u0131ra layih\u0259l\u0259rd\u0259 105 z\u0259iflik a\u015fkar edib aradan qald\u0131r\u0131blar.<\/p>\n

Dig\u0259r i\u015ftirak\u00e7\u0131lara a\u015fkar olunan z\u0259iflikl\u0259r \u00fc\u00e7\u00fcn $3000-\u0259 q\u0259d\u0259r m\u00fckafatlar\u0131n verilm\u0259si v\u0259d edilib. GitHub interfacesind\u0259 probleml\u0259r \u00fc\u00e7\u00fcn CVE identifikatoru \u0259ld\u0259 etm\u0259k v\u0259 hesabat yaratmaq imkan\u0131 art\u0131q m\u00f6vcuddur. Z\u0259iflikl\u0259r kataloqu istifad\u0259y\u0259 verilib, GitHub Advisory Database<\/a><\/noindex>bu da GitHub-da yerl\u0259\u015fdirilmi\u015f t\u0259tbiql\u0259rl\u0259 ba\u011fl\u0131 probleml\u0259r, z\u0259if paketl\u0259r v\u0259 s. haqq\u0131nda m\u0259lumatlar t\u0259qdim edir.<\/p>\n

<\/center><\/p>\n

Bundan \u0259lav\u0259, sistem art\u0131q \u015f\u0259xsi v\u0259 gizli m\u0259lumatlar\u0131n, m\u0259s\u0259l\u0259n, tokenl\u0259rin, a\u00e7arlar\u0131n v\u0259 ox\u015farlar\u0131n ictimai repolar\u0131na d\u00fc\u015fm\u0259m\u0259si \u00fc\u00e7\u00fcn inki\u015faf etmi\u015f qorunma \u0259lav\u0259 edib. Bildirilir ki, sistem 20 xidm\u0259t v\u0259 bulud sisteminin a\u00e7ar formatlar\u0131n\u0131 avtomatik taray\u0131r. Problem a\u015fkar edildikd\u0259, xidm\u0259t provayderin\u0259 problemin t\u0259sdiqi v\u0259 kompromet\u0259 olunmu\u015f a\u00e7arlar\u0131n geri \u00e7a\u011f\u0131r\u0131lmas\u0131 \u00fc\u00e7\u00fcn sor\u011fu g\u00f6nd\u0259rilir.<\/p>\n

Qeyd ed\u0259k ki, GitHub \u0259h\u0259miyy\u0259tli d\u0259r\u0259c\u0259d\u0259 Microsoft t\u0259r\u0259find\u0259n al\u0131nm\u0131\u015fd\u0131r. G\u00f6r\u00fcn\u00fcr, Redmondda veril\u0259nl\u0259rin t\u0259hl\u00fck\u0259sizliyi il\u0259 ciddi m\u0259\u015f\u011ful olma\u011fa q\u0259rar verilib.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
M\u0259nb\u0259: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e GitHub \u0432\u0441\u0435\u0440\u044c\u0451\u0437 \u0437\u0430\u0434\u0443\u043c\u0430\u043b\u043e\u0441\u044c \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041f\u041e. \u0421\u043d\u0430\u0447\u0430\u043b\u0430 \u0431\u044b\u043b\u043e \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u0428\u043f\u0438\u0446\u0431\u0435\u0440\u0433\u0435\u043d\u0435 \u0438 \u043f\u0440\u043e\u0435\u043a\u0442 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432. \u0410 \u0442\u0435\u043f\u0435\u0440\u044c \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0430 GitHub Security Lab, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 \u0443\u0447\u0430\u0441\u0442\u0438\u0435 \u0432\u0441\u0435\u0445 \u0437\u0430\u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0432 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u041f\u041e. \u0412 \u0438\u043d\u0438\u0446\u0438\u0430\u0442\u0438\u0432\u0435 \u0443\u0436\u0435 \u0443\u0447\u0430\u0441\u0442\u0432\u0443\u044e\u0442 F5, Google, HackerOne, Intel, IOActive, J.P. Morgan, LinkedIn, Microsoft, Mozilla, NCC Group, Oracle, Trail […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":52742,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-52741","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47GitHub a\u00e7\u0131q m\u0259nb\u0259li proqram t\u0259minat\u0131ndak\u0131 z\u0259iflikl\u0259ri axtaran layih\u0259 ba\u015flatd\u0131 | ProHoster","description":"G\u00f6r\u00fcn\u00fcr, GitHub r\u0259hb\u0259rliyi proqram t\u0259minat\u0131n\u0131n t\u0259hl\u00fck\u0259sizliyi il\u0259 ciddi \u015f\u0259kild\u0259 maraqlan\u0131r.","canonical_url":"https:\/\/prohoster.info\/az\/blog\/novosti-interneta\/github-initsiiroval-proekt-poiska-uyazvimostej-v-otkrytom-po","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"az_AZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47GitHub \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043b \u043f\u0440\u043e\u0435\u043a\u0442 \u043f\u043e\u0438\u0441\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u041f\u041e | ProHoster","og:description":"\u041f\u043e\u0445\u043e\u0436\u0435, \u0447\u0442\u043e \u0440\u0443\u043a\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e GitHub \u0432\u0441\u0435\u0440\u044c\u0451\u0437 \u0437\u0430\u0434\u0443\u043c\u0430\u043b\u043e\u0441\u044c \u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u041f\u041e.","og:url":"https:\/\/prohoster.info\/az\/blog\/novosti-interneta\/github-initsiiroval-proekt-poiska-uyazvimostej-v-otkrytom-po","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-14T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:32+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52741","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 04:42:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:38:23","updated":"2026-01-24 04:42:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/52741","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/comments?post=52741"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/posts\/52741\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media\/52742"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/media?parent=52741"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/categories?post=52741"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/az\/wp-json\/wp\/v2\/tags?post=52741"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}