ืจื™ืžืึธื•ื˜ืœื™ ืขืงืกืคึผืœื•ื™ื˜ืึทื‘ืึทืœ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ ื“ื™ ื”ื™ื™ื ืึทืกืกื™ืกื˜ืึทื ื˜ ืคึผืœืึทื˜ืคืึธืจืžืข

ื ืงืจื™ื˜ื™ืฉ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2023-27482) ืื™ื– ื™ื™ื“ืขื ืึทืคื™ื™ื“ ืื™ืŸ ื“ื™ ืขืคืขื ืขืŸ ื”ื™ื™ื ืึธื˜ืึทืžื™ื™ืฉืึทืŸ ืคึผืœืึทื˜ืคืึธืจืžืข ื”ื™ื™ื ืึทืกืกื™ืกื˜ืึทื ื˜, ื•ื•ืึธืก ืึทืœืึทื•ื– ืื™ืจ ืฆื• ื‘ื™ื™ืคึผืึทืก ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ ืื•ืŸ ื‘ืึทืงื•ืžืขืŸ ืคื•ืœ ืึทืงืกืขืก ืฆื• ื“ื™ ืคึผืจื™ื•ื•ืœื™ื“ื–ืฉื“ ืกื•ืคึผืขืจื•ื•ื™ื™ื–ืขืจ ืึทืคึผื™, ื“ื•ืจืš ื•ื•ืึธืก ืื™ืจ ืงืขื ืขืŸ ื˜ื•ื™ืฉืŸ ืกืขื˜ื˜ื™ื ื’ืก, ื™ื ืกื˜ืึทืœื™ืจืŸ / ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ื•ื•ื™ื™ื›ื•ื•ืืจื’, ืคื™ืจืŸ ืึทื“ื™ืฉืึทื ื– ืื•ืŸ ื‘ืึทืงืึทืคึผืก.

ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืึทืคืขืงืฅ ื™ื ืกื˜ืึทืœื™ื™ืฉืึทื ื– ื•ื•ืึธืก ื ื•ืฆืŸ ื“ื™ ืกื•ืคึผืขืจื•ื•ื™ื™ื–ืขืจ ืงืึธืžืคึผืึธื ืขื ื˜ ืื•ืŸ ืื™ื– ืืจื•ื™ืก ื–ื™ื ื˜ ื–ื™ื™ืŸ ืขืจืฉื˜ืขืจ ืจื™ืœื™ืกื™ื– (ื–ื™ื ื˜ 2017). ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ, ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ืคืึธืจืฉื˜ืขืœืŸ ืื™ืŸ ื“ื™ ื”ื™ื™ื ืึทืกืกื™ืกื˜ืึทื ื˜ ืึทืก ืื•ืŸ ื”ื™ื™ื ืึทืกืกื™ืกื˜ืึทื ื˜ ืกื•ืคึผืขืจื•ื•ื™ื™ื–ื“ ื™ื ื•ื•ื™ื™ืจืึทื ืžืึทื ืฅ, ืึธื‘ืขืจ ื˜ื•ื˜ ื ื™ืฉื˜ ื•ื•ื™ืจืงืŸ ื”ื™ื™ื ืึทืกืกื™ืกื˜ืึทื ื˜ ืงืึทื ื˜ื™ื™ื ืขืจ (ื“ืึธืงืงืขืจ) ืื•ืŸ ืžืึทื ื™ื•ืึทืœื™ ื‘ืืฉืืคืŸ ืคึผื™ื˜ื”ืึธืŸ ื™ื ื•ื•ื™ื™ืจืึทื ืžืึทื ืฅ ื‘ืื–ื™ืจื˜ ืื•ื™ืฃ ื”ื™ื™ื ืึทืกืกื™ืกื˜ืึทื ื˜ ืงืึธืจ.

ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ืคืึทืจืคืขืกื˜ื™ืงื˜ ืื™ืŸ ื”ื™ื™ื ืึทืกืกื™ืกื˜ืึทื ื˜ ืกื•ืคึผืขืจื•ื•ื™ื™ื–ืขืจ ื•ื•ืขืจืกื™ืข 2023.01.1. ืึทืŸ ื ืึธืš ื•ื•ืึธืจืงืึทืจืึธื•ื ื“ ืื™ื– ืึทืจื™ื™ึทื ื’ืขืจืขื›ื ื˜ ืื™ืŸ ื“ื™ ื”ื™ื™ื ืึทืกืกื™ืกื˜ืึทื ื˜ 2023.3.0 ืžืขืœื“ื•ื ื’. ืื•ื™ืฃ ืกื™ืกื˜ืขืžืขืŸ ื•ื•ืึธืก ืขืก ืื™ื– ื ื™ื˜ ืžืขื’ืœืขืš ืฆื• ื™ื ืกื˜ืึทืœื™ืจืŸ ื“ื™ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ืฆื• ืคืึทืจืฉืคึผืึทืจืŸ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™, ืื™ืจ ืงืขื ืขืŸ ื‘ืึทื’ืจืขื ืขืฆืŸ ืึทืงืกืขืก ืฆื• ื“ื™ ื ืขืฅ ืคึผืึธืจื˜ ืคื•ืŸ ื“ื™ ื”ื™ื™ื ืึทืกืกื™ืกื˜ืึทื ื˜ ื•ื•ืขื‘ ืกืขืจื•ื•ื™ืก ืคึฟื•ืŸ ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ื ืขื˜ื•ื•ืึธืจืงืก.

ื“ืขืจ ืื•ืคึฟืŸ ืคื•ืŸ ืขืงืกืคึผืœื•ื™ื˜ื™ื ื’ ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื ืึธืš ื ื™ืฉื˜ ื“ื™ื˜ื™ื™ืœื“ (ืœื•ื™ื˜ ื“ื™ ื“ืขื•ื•ืขืœืึธืคึผืขืจืก, ื•ื•ืขื’ืŸ 1/3 ืคื•ืŸ ื™ื•ื–ืขืจื– ื”ืึธื‘ืŸ ืื™ื ืกื˜ืึทืœื™ืจืŸ ื“ื™ ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ืื•ืŸ ืคื™ืœืข ืกื™ืกื˜ืขืžืขืŸ ื‘ืœื™ื™ื‘ืŸ ืฉืคึผื™ืจืขื•ื•ื“ื™ืง). ืื™ืŸ ื“ื™ ืงืขืจืขืงื˜ืึทื“ ื•ื•ืขืจืกื™ืข, ืื•ื ื˜ืขืจ ื“ื™ ื’ื™ื™ื– ืคื•ืŸ ืึทืคึผื˜ืึทืžืึทื–ื™ื™ืฉืึทืŸ, ืขื ื“ืขืจื•ื ื’ืขืŸ ื–ืขื ืขืŸ ื’ืขืžืื›ื˜ ืื™ืŸ ื“ื™ ืคึผืจืึทืกืขืกื™ื ื’ ืคื•ืŸ ื˜ืึธืงืขื ืก ืื•ืŸ ืคึผืจืึทืงืกื™ื™ื“ ืงื•ื•ื™ืจื™ื–, ืื•ืŸ ืคื™ืœื˜ืขืจืก ื–ืขื ืขืŸ ืฆื•ื’ืขื’ืขื‘ืŸ ืฆื• ืคืึทืจืฉืคึผืึทืจืŸ ื“ื™ ืกืึทื‘ืกื˜ื™ื˜ื•ืฉืึทืŸ ืคื•ืŸ SQL ืงื•ื•ื™ืจื™ื– ืื•ืŸ ื“ื™ ื™ื ืกืขืจืฉืึทืŸ ืคื•ืŸ ื“ื™ " ยป ะธ ะธัะฟะพะปัŒะทะพะฒะฐะฝะธั ะฟัƒั‚ะตะน ั ยซ../ยป ะธ ยซ/./ยป.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’