ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ืŸ Apache OpenMeetings ื•ื•ืึธืก ืึทืœืึทื•ื– ืึทืงืกืขืก ืฆื• ืงื™ื™ืŸ ืึทืจื˜ื™ืงืœืขืŸ ืื•ืŸ ื“ื™ืกืงื•ืกื™ืขืก

ื ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ (CVE-2023-28936) ืื™ื– ืคืึทืจืคืขืกื˜ื™ืงื˜ ืื™ืŸ ื“ื™ Apache OpenMeetings ื•ื•ืขื‘ ืงืึทื ืคืจืึทื ืกื™ื ื’ ืกืขืจื•ื•ืขืจ, ื•ื•ืึธืก ืึทืœืึทื•ื– ืึทืงืกืขืก ืฆื• ืึทืจื‘ื™ื˜ืจืึทืจื™ืฉ ืจืขืงืึธืจื“ื™ื ื’ืก ืื•ืŸ ืฉืžื•ืขืกืŸ ืจื•ืžื–. ื“ืขืจ ืคึผืจืึธื‘ืœืขื ืื™ื– ืึทืกื™ื™ื ื“ ืึท ืงืจื™ื˜ื™ืฉ ืžื“ืจื’ื” ืคื•ืŸ ื’ืขืคืึทืจ. ื“ื™ ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ ืื™ื– ื’ืขืคึฟื™ืจื˜ ื“ื•ืจืš ืคืึทืœืฉ ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ ื”ืึทืฉ ื’ืขื ื™ืฆื˜ ืฆื• ืคืึทืจื‘ื™ื ื“ืŸ ื ื™ื™ึทืข ืคึผืึทืจื˜ื™ืกืึทืคึผืึทื ืฅ. ื“ืขืจ ื–ืฉื•ืง ืื™ื– ื’ืขื•ื•ืขืŸ ื–ื™ื ื˜ ืžืขืœื“ื•ื ื’ 2.0.0 ืื•ืŸ ืื™ื– ื’ืขื•ื•ืขืŸ ืคืึทืจืคืขืกื˜ื™ืงื˜ ืื™ืŸ ื“ื™ Apache OpenMeetings 7.1.0 ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ ื‘ืืคืจื™ื™ื˜ ืึท ื‘ื™ืกืœ ื˜ืขื’ ืฆื•ืจื™ืง.

ืื™ืŸ ืึทื“ื™ืฉืึทืŸ, ืฆื•ื•ื™ื™ ื•ื•ื™ื™ื ื™ืงืขืจ ื’ืขืคืขืจืœืขืš ื•ื•ืึทืœื ืขืจืึทื‘ื™ืœื™ื˜ื™ื– ื–ืขื ืขืŸ ืคืึทืจืคืขืกื˜ื™ืงื˜ ืื™ืŸ Apache OpenMeetings 7.1.0:

  • CVE-2023-29032 - ืžืขื’ืœืขื›ืงื™ื™ื˜ ืฆื• ื‘ื™ื™ืคึผืึทืก ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ. ืึท ืึทื˜ืึทืงืขืจ ื•ื•ืึธืก ื•ื•ื™ื™ืกื˜ ื–ื™ื›ืขืจ ืฉืคึผื™ืจืขื•ื•ื“ื™ืง ืื™ื ืคึฟืึธืจืžืึทืฆื™ืข ื•ื•ืขื’ืŸ ืึท ื‘ืึทื ื™ืฆืขืจ ืงืขื ืขืŸ ื™ืžืคึผืขืจืกืึทื ื™ื™ื˜ ืื ื“ืขืจืŸ ื‘ืึทื ื™ืฆืขืจ.
  • CVE-2023-29246 - ื ื•ืœ ืกืึทื‘ืกื˜ื™ื˜ื•ืฉืึทืŸ ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืฆื• ื•ื™ืกืคื™ืจืŸ ืงืึธื“ ืื•ื™ืฃ ื“ื™ ืกืขืจื•ื•ืขืจ ืื•ื™ื‘ ื“ื™ OpenMeetings ืึทื“ืžื™ื ื™ืกื˜ืจืึทื˜ืึธืจ ื—ืฉื‘ื•ืŸ ื”ืื˜ ืึทืงืกืขืก.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’