2. ݡ
  4. ڽסWordPressץ饰LiteSpeed Cache(5.7.0.1̤)פˤ۵ι⤤ȼˤĤ

2024ǯ513
ڽסWordPressץ饰LiteSpeed Cache(5.7.0.1̤)פˤ۵ι⤤ȼˤĤ

ʿǤӥѤˤ꤬Ȥޤ

WordPressפΥץ饰LiteSpeed Cache(5.7.0.1̤)פΤѴĶˤơ
۵ι⤤ƥȼˤǧ졢󶡸ȼкܤ줿Ǥ꡼Ƥޤ
ޤẢȼɸŪȤ⤬ȯƤݤξ󤬡ƥϢؤ濴ȯƤޤ

ӥˤ¿ΤͤLiteSpeed CacheפѤƤޤᡢʲξ򤴰⤤ޤ

ŤСΡLiteSpeed CacheפѤΤͤˤϡ
ɬǿС(5.7.0.1ʾ)ؤΥåץǡȤԤäƤ褦ꤤޤ

ȼαƶǽΤLiteSpeed Cacheץץ饰ѤƤ뤪ͤ
ɻкŬѤΤϢ
ǿС[LiteSpeed Cache(6.2.0.1)]ؤΥåץǡȤΤꤤ
᡼ˤդƤޤ

ܺ٤ˤĤޤƤϲ򤴻Ȥ

----------------------------------------------------------------------
ȼǧץ饰
LiteSpeed Cache(5.7.0.1̤)2024ǯ513ߡ6.2.0.1פǿǡ

ȼαƶ

ȥץƥ󥰤ؤΰѤˤꡢWordPressեǡ١˰դΤJavaScriptɤꡢԥ桼ǽޤ

ܺ٤ˤĤơʳȡ
LiteSpeed Cache < 5.7.0.1 - Unauthenticated Stored XSS
https://wpscan.com/vulnerability/dd9054cc-1259-427d-a4ad-1875b7b2b3b4/
WordPress LiteSpeed Cache Plugin <= 5.7 is vulnerable to Cross Site Scripting (XSS)
https://patchstack.com/database/vulnerability/litespeed-cache/wordpress-litespeed-cache-plugin-5-7-unauthenticated-site-wide-stored-xss-vulnerability/


бˡʥåץǡˡ
WordPressδڡʥåܡɡˤ˥󤷡
[ץ饰]˥塼[󥹥ȡѤߥץ饰]
ǿСؤΥåץǡȤԤäƤ

ȼ˸¤餺WordPressϤȤץѤΤͤ
ƥδ顢ǿǤؤΥåץǡȤԤ
ץǿξ֤ݤĤ褦Ϥ򤪴ꤤޤ
----------------------------------------------------------------------

ҤǤϡ⤪ͤ˰¿ƥӥѤ褦
ǽβ䥻ƥؤƤޤޤ

Ȥӥꤤ夲ޤ

Τ餻ȥåפ