{"id":105840,"date":"2022-12-05T15:36:44","date_gmt":"2022-12-05T13:36:44","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimosti-v-vs-code-grafana-gnu-emacs-i-apache-fineract"},"modified":"2022-12-05T15:36:44","modified_gmt":"2022-12-05T13:36:44","slug":"uyazvimosti-v-vs-code-grafana-gnu-emacs-i-apache-fineract","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-v-vs-code-grafana-gnu-emacs-i-apache-fineract","title":{"rendered":"Vulnerabilitetet n\u00eb VS Code, Grafana, GNU Emacs dhe Apache Fineract","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Disa vulnerabilitete t\u00eb zbuluara s\u00eb fundmi:  <\/p>\n<ul>\n<li class=\"l\"> N\u00eb redaktorin Visual Studio Code (VS Code) \u00ebsht\u00eb identifikuar nj\u00eb dob\u00ebsi kritike (CVE-2022-41034), e cila lejon ekzekutimin e kodit duke hapur nj\u00eb lidhje t\u00eb p\u00ebrgatitur nga sulmuesi. Kodi mund t\u00eb ekzekutohet si n\u00eb kompjuterin me VS Code, ashtu edhe n\u00eb \u00e7do kompjuter tjet\u00ebr q\u00eb lidhet me VS Code p\u00ebrmes funksionit 'Remote Development'. Problemi paraqet rrezikun m\u00eb t\u00eb madh p\u00ebr p\u00ebrdoruesit e versionit web t\u00eb VS Code dhe redaktor\u00ebve web n\u00eb baz\u00eb t\u00eb tij, duke p\u00ebrfshir\u00eb GitHub Codespaces dhe github.dev.\n<p>Dob\u00ebsia \u00ebsht\u00eb shkaktuar nga mund\u00ebsia e trajtimit t\u00eb lidhjeve t\u00eb sh\u00ebrbimit 'command:' p\u00ebr t\u00eb hapur nj\u00eb dritare terminali dhe p\u00ebr t\u00eb ekzekutuar komanda shell t\u00eb rastit, gjat\u00eb trajtimit n\u00eb redaktor t\u00eb dokumenteve t\u00eb p\u00ebrgatitura posa\u00e7\u00ebrisht n\u00eb formatin Jupyter Notebook, t\u00eb ngarkuara nga <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/server\/\"   title=\"servert web\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"765\">servert web<\/a>, t\u00eb kontrolluara nga sulmuesit (skedar\u00ebt e jasht\u00ebm me zgjerimin '.ipynb' hapen pa konfirmime t\u00eb shumta n\u00eb m\u00ebnyr\u00ebn 'isTrusted', q\u00eb lejon trajtimin e 'command:').    <\/p>\n<li class=\"l\"> N\u00eb redaktorin tekstual GNU Emacs \u00ebsht\u00eb zbuluar nj\u00eb vulnerabilitet (CVE-2022-45939) q\u00eb lejon ekzekutimin e komandave kur hapet nj\u00eb skedar me kod, p\u00ebrmes z\u00ebvend\u00ebsimit t\u00eb simboleve speciale n\u00eb em\u00ebr, q\u00eb p\u00ebrpunohen me mjetin ctags.\n<li class=\"l\"> N\u00eb platform\u00ebn e hapur t\u00eb vizualizimit t\u00eb t\u00eb dh\u00ebnave Grafana \u00ebsht\u00eb zbuluar nj\u00eb vulnerabilitet (CVE-2022-31097) q\u00eb lejon ekzekutimin e kodit JavaScript gjat\u00eb nxjerrjes s\u00eb njoftimit p\u00ebrmes sistemit Grafana Alerting. Nj\u00eb sulmues me t\u00eb drejta redaktori (Editor) mund t\u00eb p\u00ebrgatis\u00eb nj\u00eb lidhje t\u00eb ve\u00e7ant\u00eb dhe t\u00eb fitoj\u00eb akses n\u00eb nd\u00ebrfaqen Grafana me t\u00eb drejta administratori n\u00ebse administratori kalon n\u00ebp\u00ebr k\u00ebt\u00eb lidhje. Vulnerabiliteti \u00ebsht\u00eb eliminuar n\u00eb versionet Grafana 9.2.7, 9.3.0, 9.0.3, 8.5.9, 8.4.10 dhe 8.3.10.\n<li class=\"l\"> Vulnerabiliteti (CVE-2022-46146) n\u00eb bibliotek\u00ebn exporter-toolkit, e cila p\u00ebrdoret p\u00ebr t\u00eb krijuar module eksportimi p\u00ebr metrika p\u00ebr Prometheus. Problemi lejon q\u00eb t\u00eb anashkalohet autentikimi basic.\n<li class=\"l\"> Dob\u00ebsia (CVE-2022-44635) n\u00eb platform\u00ebn p\u00ebr krijimin e sh\u00ebrbimeve financiare Apache Fineract, e cila lejon nj\u00eb p\u00ebrdorues t\u00eb paautorizuar t\u00eb arrij\u00eb ekzekutimin e larg\u00ebt t\u00eb kodit. Problemi \u00ebsht\u00eb shkaktuar nga mungesa e duhur e ekranuarjes s\u00eb karaktereve '..' n\u00eb rrug\u00ebt q\u00eb trajtohen nga komponenti p\u00ebr ngarkimin e skedar\u00ebve. Dob\u00ebsia \u00ebsht\u00eb eliminuar n\u00eb edicionet Apache Fineract 1.7.1 dhe 1.8.1.\n<li class=\"l\"> Nj\u00eb dob\u00ebsi (CVE-2022-46366) n\u00eb korniz\u00ebn Java Apache Tapestry, e cila lejon ekzekutimin e kodit t\u00eb saj gjat\u00eb deserializimit t\u00eb t\u00eb dh\u00ebnave t\u00eb formatuara posa\u00e7\u00ebrisht. Problemi shfaqet vet\u00ebm n\u00eb deg\u00ebn e vjet\u00ebr t\u00eb Apache Tapestry 3.x, e cila tashm\u00eb nuk mb\u00ebshtetet m\u00eb.\n<li class=\"l\"> Dob\u00ebsit\u00eb n\u00eb ofruesit e Apache Airflow p\u00ebr Hive (CVE-2022-41131), Pinot (CVE-2022-38649), Pig (CVE-2022-40189) dhe Spark (CVE-2022-40954), q\u00eb \u00e7ojn\u00eb n\u00eb ekzekutimin e larg\u00ebt t\u00eb kodit p\u00ebrmes ngarkimit t\u00eb skedar\u00ebve t\u00eb rast\u00ebsish\u00ebm ose z\u00ebvend\u00ebsimit t\u00eb komandave n\u00eb kontekstin e ekzekutimit t\u00eb detyrave, pa pasur qasje p\u00ebr t\u00eb shkruar n\u00eb skedar\u00ebt DAG.                <\/ul>\n<p>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=58264\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: \u0412 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 Visual Studio Code (VS Code) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-41034), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0441\u0441\u044b\u043b\u043a\u0438, \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c. \u041a\u043e\u0434 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043a\u0430\u043a \u043d\u0430 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0435 \u0441 VS Code, \u0442\u0430\u043a \u0438 \u043d\u0430 \u043b\u044e\u0431\u044b\u0445 \u0434\u0440\u0443\u0433\u0438\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445, \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0445 \u043a VS Code \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 &#171;Remote Development&#187;. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0443\u044e \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-105840","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: \u0412 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 Visual Studio Code (VS Code) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-41034), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-v-vs-code-grafana-gnu-emacs-i-apache-fineract\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 VS Code, Grafana, GNU Emacs \u0438 Apache Fineract | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: \u0412 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 Visual Studio Code (VS Code) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-41034), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-v-vs-code-grafana-gnu-emacs-i-apache-fineract\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-12-05T13:36:44+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-12-05T13:36:44+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsit\u00eb n\u00eb VS Code, Grafana, GNU Emacs dhe Apache Fineract | ProHoster","description":"Disa dob\u00ebsi t\u00eb zbuluara s\u00eb fundmi: N\u00eb redaktorin Visual Studio Code (VS Code) \u00ebsht\u00eb zbuluar nj\u00eb dob\u00ebsi kritike (CVE-2022-41034), e cila lejon organizimin e ekzekutimit t\u00eb kodit gjat\u00eb hapjes.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-v-vs-code-grafana-gnu-emacs-i-apache-fineract","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 VS Code, Grafana, GNU Emacs \u0438 Apache Fineract | ProHoster","og:description":"\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: \u0412 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 Visual Studio Code (VS Code) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2022-41034), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimosti-v-vs-code-grafana-gnu-emacs-i-apache-fineract","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-12-05T13:36:44+00:00","article:modified_time":"2022-12-05T13:36:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"105840","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-02-08 20:31:51","updated":"2026-02-08 20:31:51","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105840","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=105840"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105840\/revisions"}],"predecessor-version":[{"id":157956,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/105840\/revisions\/157956"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=105840"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=105840"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=105840"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}