I-WordPress ne-Apache Struts ihola phakathi kwamapulatifomu ewebhu ngenani lobungozi ngokuxhashazwa

Inkampani ye-RiskSense eshicilelwe Imiphumela ukuhlaziywa kobungozi obungu-1622 kuzinhlaka nezinkundla zewebhu, ezikhonjwe kusukela ngo-2010 kuya kuNovemba 2019. Ezinye iziphetho:

  • I-WordPress ne-Apache Struts yenza i-57% yabo bonke ukukhubazeka okulungiselelwe ukuhlaselwa.
    Okulandelayo kuza iDrupal, iRuby on Rails kanye neLaravel. Uhlu lwezingxenyekazi ezinobungozi obuxhashaziwe futhi luhlanganisa i-Node.js ne-Django, kodwa ngayinye yathola ubungozi obukodwa ngokuxhashazwa kokungu-56 kanye no-66 okutholakalayo ekubeni sengozini. Ubungozi obuvame kakhulu ku-WordPress umbhalo we-cross-site, futhi kuma-Apache Struts ayizinkinga zokuqinisekisa okokufaka.

  • Amaphrojekthi ngezilimi ze-PHP ne-Java ahola ngenani lobungozi ngezinto ezikhona.
  • Ngo-2019, inani eliphelele lokukhubazeka lehla, kodwa isabelo sobuthakathaka ngokuxhashazwa sikhuphuke sisuka ku-3.9% saya ku-8.6%, ikakhulukazi ngenxa yokwanda kwenani lokuxhashazwa kwe-Ruby on Rails, WordPress ne-Java.
  • Ukuba sengozini okuvame kakhulu kusampula yeminyaka eyi-10 ukubhalwa kwe-cross-site scripting (XSS). Kusampula yeminyaka emi-5, abaholi bangaba sengozini okubangelwa ukuqinisekiswa okungalungile kwedatha yokufaka (24% yabo bonke ubungozi obunokuxhashazwa), futhi i-XSS yehlele endaweni yesi-5.
  • Ukuba sengozini okuvumela ukushintshwa kwe-SQL, ikhodi nemiyalo akuvamile, kodwa ahola ngokuya ngokutholakala kokuxhashazwa - ukuxhashazwa kulungiselelwe ngaphezu kuka-50% wokulimala okunjalo (ama-60% wokushintsha umyalo kanye no-39% wokushintsha ikhodi) .

Source: opennet.ru

Engeza amazwana