{"id":106429,"date":"2023-01-20T18:48:19","date_gmt":"2023-01-20T16:48:19","guid":{"rendered":"https:\/\/prohoster.info\/?p=106429"},"modified":"2023-01-26T22:45:16","modified_gmt":"2023-01-26T20:45:16","slug":"v-ruby-on-rails-ustranena-uyazvimost-dopuskayushhaya-podstanovku-sql-koda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/v-ruby-on-rails-ustranena-uyazvimost-dopuskayushhaya-podstanovku-sql-koda","title":{"rendered":"N\u00eb Ruby on Rails \u00ebsht\u00eb eliminuar nj\u00eb vulnerabilitet q\u00eb lejon injeksionin e SQL.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Shtyhen p\u00ebrdit\u00ebsime t\u00eb korrigjuara p\u00ebr kuadri Ruby on Rails 7.0.4.1, 6.1.7.1 dhe 6.0.6.1, n\u00eb t\u00eb cilat jan\u00eb eliminuar 6 vulnerabilitete. Vulnerabiliteti m\u00eb i rreziksh\u00ebm (CVE-2023-22794) mund t\u00eb \u00e7oj\u00eb n\u00eb ekzekutimin e komandave SQL t\u00eb caktuara nga sulmuesi kur p\u00ebrdoren t\u00eb dh\u00ebna t\u00eb jashtme n\u00eb komente, t\u00eb p\u00ebrpunuar n\u00eb ActiveRecord. Problemi shkaktohet nga mungesa e ekranuar t\u00eb nevojshme t\u00eb karaktereve speciale n\u00eb komente para se ato t\u00eb ruhen n\u00eb DBMS. <\/p>\n
Vulnerabiliteti i dyt\u00eb (CVE-2023-22797) mund t\u00eb p\u00ebrdoret p\u00ebr organizimin e ridrejtimit n\u00eb faqe t\u00eb tjera (ridrejtim i hapur) kur p\u00ebrdoren t\u00eb dh\u00ebna t\u00eb jashtme t\u00eb pa verifikuara n\u00eb trajtuesin redirect_to. Kat\u00ebr vulnerabilitetet e tjera \u00e7ojn\u00eb n\u00eb d\u00ebshtim t\u00eb sh\u00ebrbimeve p\u00ebr shkak t\u00eb krijimit t\u00eb nj\u00eb ngarkese t\u00eb lart\u00eb n\u00eb sistem (p\u00ebr shkak t\u00eb p\u00ebrpunimit t\u00eb t\u00eb dh\u00ebnave t\u00eb jashtme me shprehje t\u00eb rregullta t\u00eb paefektshme dhe t\u00eb zgjatura). \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"