4/29至5/5 Kown Exploited Vulnerabilities Catalog(KEV)週報
- 發布單位:TWCERT/CC
- 更新日期:2024-05-09
- 點閱次數:749
- 內容說明：
CISA於4/29至5/5在Kown Exploited Vulnerabilities Catalog(KEV)中發布2個已遭駭客利用之漏洞。
- 影響平台：
受影響廠商與產品名稱如下：
Microsoft｜SmartScreen Prompt
GitLab｜GitLab Community與Enterprise Editions
- 處置建議：
修補說明請參考以下官方連結：
Microsoft｜SmartScreen Prompt
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29988
GitLab｜GitLab Community與Enterprise Editions
https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/
- CVE編號：
CVE-2023-7028
CVE-2024-29988
相關連結
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog
- https://nvd.nist.gov/vuln/detail/CVE-2023-7028
- https://nvd.nist.gov/vuln/detail/CVE-2024-29988
- https://about.gitlab.com/releases/2024/01/11/critical-security-release-gitlab-16-7-2-released/
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29988