8/25至8/31 Known Exploited Vulnerabilities Catalog(KEV)週報
- 發布單位:TWCERT/CC
- 更新日期:2025-09-04
- 點閱次數:470
- 內容說明：
CISA於8/25至8/31在Known Exploited Vulnerabilities Catalog(KEV)中發布5個已遭駭客利用之漏洞。
- 影響平台：
Sangoma｜FreePBX
Citrix｜NetScaler
Git｜Git
Citrix｜Session Recording
- 處置建議：
修補說明請參考以下官方連結：
Sangoma｜FreePBX
https://github.com/FreePBX/security-reporting/security/advisories/GHSA-m42g-xg4c-5f3h
Citrix｜NetScaler
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694938
Citrix｜Session Recording
https://support.citrix.com/external/article/691941/citrix-session-recording-security-bullet.html
Git｜Git
https://github.com/git/git/security/advisories/GHSA-vwqx-4fm8-6qc9
https://access.redhat.com/errata/RHSA-2025:13933
https://alas.aws.amazon.com/AL2/ALAS2-2025-2941.html
https://linux.oracle.com/errata/ELSA-2025-11534.html
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-48384
- CVE編號：
CVE-2024-8068
CVE-2024-8069
CVE-2025-7775
CVE-2025-48384
CVE-2025-57819