{"id":81518,"date":"2020-05-14T07:42:04","date_gmt":"2020-05-14T05:42:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/75-kommercheskih-prilozhenij-vklyuchayut-ustarevshij-otkrytyj-kod-s-uyazvimostyami"},"modified":"2020-05-14T07:42:04","modified_gmt":"2020-05-14T05:42:04","slug":"75-kommercheskih-prilozhenij-vklyuchayut-ustarevshij-otkrytyj-kod-s-uyazvimostyami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/75-kommercheskih-prilozhenij-vklyuchayut-ustarevshij-otkrytyj-kod-s-uyazvimostyami","title":{"rendered":"75% din aplica\u021biile comerciale includ cod deschis vechi cu vulnerabilit\u0103\u021bi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Compania Synopsys a analizat<\/a><\/noindex> 1253 de baze de cod comerciale \u0219i a concluzionat c\u0103 aproape toate (99%) aplica\u021biile comerciale analizate includ cel pu\u021bin un component cu surs\u0103 deschis\u0103, iar 70% din codul din repositoarele analizate este deschis. Spre compara\u021bie, \u00een cadrul unei cercet\u0103ri similare din 2015, propor\u021bia codului deschis era de 36%.<\/p>\n

\u00cen majoritatea cazurilor, codul surs\u0103 deschis utilizat nu este actualizat \u0219i con\u021bine probleme poten\u021biale de securitate \u2014 91% dintre codurile analizate con\u021bin componente deschise care nu au fost actualizate de mai bine de 5 ani sau sunt abandonate de cel pu\u021bin 2 ani \u0219i nu sunt \u00eentre\u021binute de dezvoltatori. Drept urmare, 75% dintre vulnerabilit\u0103\u021bile cunoscute identificate \u00een depozitele de cod deschis r\u0103m\u00e2n nerezolvate, dintre care jum\u0103tate au un nivel ridicat de pericol. \u00cen mostrele din 2018, propor\u021bia de cod cu vulnerabilit\u0103\u021bi era de 60%.<\/p>\n

Cea mai frecvent\u0103 vulnerabilitate periculoas\u0103 a fost
\nproblema CVE-2018-16487<\/a><\/noindex> (executare de cod la distan\u021b\u0103) \u00een biblioteca lodash<\/a><\/noindex> pentru Node.js, versiunile vulnerabile fiind \u00eent\u00e2lnite de peste 500 de ori. Cea mai veche vulnerabilitate neremediate a fost o problem\u0103 \u00een demonul lpd (CVE-1999-0061<\/a><\/noindex>), corectat\u0103 \u00een 1999.<\/p>\n

Pe l\u00e2ng\u0103 problemele de securitate, \u00een codurile bazelor proiectelor comerciale se observ\u0103 \u0219i o neglijen\u021b\u0103 \u00een respectarea condi\u021biilor licen\u021belor open source.
\n\u00cen 73% din codurile baz\u0103 au fost g\u0103site probleme legale privind utilizarea codului deschis, de exemplu, incompatibilit\u0103\u021bi ale licen\u021belor (de obicei, codul GPL este inclus \u00een produsele comerciale f\u0103r\u0103 a deschide produsul derivat) sau utilizarea codului f\u0103r\u0103 a men\u021biona licen\u021ba. 93% din toate problemele legate de licen\u021b\u0103 se manifest\u0103 \u00een aplica\u021biile web \u0219i mobile. \u00cen jocuri, sisteme de realitate virtual\u0103, programe multimedia \u0219i de divertisment, \u00eenc\u0103lc\u0103rile au fost observate \u00een 59% din cazuri.<\/p>\n

\u00cen cadrul cercet\u0103rii, au fost identificate 124 de componente open source tipice, folosite de obicei \u00een toate codurile baz\u0103. Cele mai populare dintre acestea sunt: jQuery (55%), Bootstrap (40%), Font Awesome (31%), Lodash (30%) \u0219i jQuery UI (29%). \u00cen func\u021bie de limbajele de programare, cele mai populare sunt JavaScript (utilizat \u00een 74% din proiecte), C++ (57%), Shell (54%), C (50%), Python (46%), Java (40%), TypeScript (36%), C# (36%); Perl (30%) \u0219i Ruby (25%). Propor\u021bia total\u0103 a limbajelor de programare este:
\nJavaScript (51%), C++ (10%), Java (7%), Python (7%), Ruby (5%), Go (4%), C (4%), PHP (4%), TypeScript (4%), C# (3%), Perl (2%) \u0219i Shell (1%).<\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Synopsys \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 1253 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u0434\u043e\u0432\u044b\u0445 \u0431\u0430\u0437 \u0438 \u043f\u0440\u0438\u0448\u043b\u0430 \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e \u043f\u043e\u0447\u0442\u0438 \u0432\u0441\u0435 (99%) \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u043e\u0434\u0438\u043d \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0430 70% \u043a\u043e\u0434\u0430 \u0432 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043d\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c. \u0414\u043b\u044f \u0441\u0440\u0430\u0432\u043d\u0435\u043d\u0438\u044f \u0432 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 2015 \u0433\u043e\u0434\u0430 \u0434\u043e\u043b\u044f \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0430 36%. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0439 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-81518","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd4775% dintre aplica\u021biile comerciale includ cod deschis \u00eenvechit cu vulnerabilit\u0103\u021bi | ProHoster","description":"Compania Synopsys a analizat 1253 de baze de cod comerciale \u0219i a ajuns la concluzia c\u0103 aproape.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/75-kommercheskih-prilozhenij-vklyuchayut-ustarevshij-otkrytyj-kod-s-uyazvimostyami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4775% \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0439 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u043a\u043e\u0434 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Synopsys \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0430 1253 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043e\u0434\u043e\u0432\u044b\u0445 \u0431\u0430\u0437 \u0438 \u043f\u0440\u0438\u0448\u043b\u0430 \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e \u043f\u043e\u0447\u0442\u0438.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/75-kommercheskih-prilozhenij-vklyuchayut-ustarevshij-otkrytyj-kod-s-uyazvimostyami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-05-14T05:42:04+00:00","article:modified_time":"2020-05-14T05:42:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"81518","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:56:25","updated":"2022-09-30 18:48:01","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/81518","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=81518"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/81518\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=81518"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=81518"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=81518"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}