• 發布單位:TWCERT/CC
• 更新日期:2026-10-13
• 點閱次數:230

• 內容說明

CISA於10/5至10/11在Known Exploited Vulnerabilities Catalog(KEV)中發布5個已遭駭客利用之漏洞。

• 影響平台

Apache｜Struts

ISC｜BIND

ONLYOFFICE｜Docs

ProFTPD｜ProFTPD

Strapi｜Strapi

• 處置建議

修補說明請參考以下官方連結：

Apache｜Struts

CVE-2016-3081

https://cwiki.apache.org/confluence/display/WW/S2-032

https://nvd.nist.gov/vuln/detail/CVE-2016-3081

ISC｜BIND

CVE-2015-5477

https://web.archive.org/web/20150729014733/https://kb.isc.org/article/AA-01272

https://access.redhat.com/errata/RHSA-2015:1513.html

https://supportportal.juniper.net/s/article/2016-01-Security-Bulletin-Junos-Vulnerability-in-ISC-BIND-named-CVE-2015-5477

https://nvd.nist.gov/vuln/detail/CVE-2015-5477

ONLYOFFICE｜Docs

CVE-2021-3199

https://github.com/ONLYOFFICE/DocumentServer/blob/903fe5ab7a275bd69c3c3346af2d21cf87ebeabf/CHANGELOG.md#563

https://nvd.nist.gov/vuln/detail/CVE-2021-3199

ProFTPD｜ProFTPD

CVE-2015-3306

http://www.proftpd.org/

https://lists.debian.org/debian-security-announce/2015/msg00154.html

https://lists.opensuse.org/archives/list/updates@lists.opensuse.org/message/WE6YZRG5UVXMGQ7IVDRYBPIWV4M6UUGM/

https://nvd.nist.gov/vuln/detail/CVE-2015-3306

Strapi｜Strapi

CVE-2023-22894

https://strapi.io/blog/security-disclosure-of-vulnerabilities-cve

https://github.com/strapi/strapi/releases

https://nvd.nist.gov/vuln/detail/CVE-2023-22894