Vulnerability hauv SQLite DBMS

Hauv SQLite DBMS txheeb xyuas yooj yim (CVE-2019-5018), uas tso cai rau koj ua tiav koj cov cai ntawm lub kaw lus yog tias nws tuaj yeem ua tiav cov lus nug SQL npaj los ntawm tus neeg tawm tsam. Qhov teeb meem yog tshwm sim los ntawm kev ua yuam kev hauv kev siv lub qhov rais ua haujlwm thiab tshwm sim pib ntawm ceg SQLite 3.26. Qhov tsis zoo tshem tawm nyob rau hauv lub Plaub Hlis qhov teeb meem SQLite 3.28 nrog tsis muaj kev qhia meej txog kev kho cov teeb meem kev nyab xeeb.

Ib qho tshwj xeeb SQL SELECT query tuaj yeem ua rau kev siv-tom qab-dawb lub cim xeeb nkag, uas tuaj yeem siv los tsim kev siv los ua cov lej hauv cov ntsiab lus ntawm daim ntawv thov siv SQLite. Qhov tsis zoo tuaj yeem siv tau yog tias daim ntawv thov tso cai SQL tsim los ntawm sab nraud kom dhau mus rau SQLite.

Piv txwv li, kev tawm tsam tuaj yeem ua rau muaj peev xwm ua tiav ntawm Chrome browser thiab cov ntawv thov siv lub cav Chromium, txij li WebSQL API tau siv rau sab saum toj ntawm SQLite thiab nkag mus rau DBMS no los ua cov lus nug SQL los ntawm cov ntawv thov web. Txhawm rau tawm tsam, nws yog qhov txaus los tsim nplooj ntawv nrog cov lej tsis zoo JavaScript thiab yuam kom tus neeg siv qhib nws hauv browser raws li Chromium cav.

Tau qhov twg los: opennet.ru