CVE:CVE-2023-40023
CNNVD:CNNVD-202308-1249
Yaklang是yaklang.io Project开源的一款专为网络安全设计的编程语言。
Yaklang 1.2.4-sp1之前版本存在安全漏洞。攻击者利用该漏洞可以获取敏感信息。
solution:Upgrade yaklang yaklang to a higher version than 1.2.0:sp6,1.2.0:sp7,1.2.0:sp8,1.2.1,1.2.1:sp1,1.2.1:sp2,1.2.1:sp3,1.2.1:sp4,1.2.1:sp5,1.2.1:sp6,1.2.1:sp7,1.2.1:sp8,1.2.1:sp9,1.2.2,1.2.2:sp1,1.2.2:sp2,1.2.2:sp3,1.2.2:sp4,1.2.2:sp5,1.2.2:sp6,1.2.2:sp7,1.2.3,1.2.3:sp1,1.2.3:sp2,1.2.3:sp3,1.2.4,and avoid the version 1.2.0:sp6,1.2.0:sp7,1.2.0:sp8,1.2.1,1.2.1:sp1,1.2.1:sp2,1.2.1:sp3,1.2.1:sp4,1.2.1:sp5,1.2.1:sp6,1.2.1:sp7,1.2.1:sp8,1.2.1:sp9,1.2.2,1.2.2:sp1,1.2.2:sp2,1.2.2:sp3,1.2.2:sp4,1.2.2:sp5,1.2.2:sp6,1.2.2:sp7,1.2.3,1.2.3:sp1,1.2.3:sp2,1.2.3:sp3,1.2.4