<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>CVE-2025-13828 on 办公AI智能小助手</title>
    <link>https://blog.qife122.com/tags/cve-2025-13828/</link>
    <description>Recent content in CVE-2025-13828 on 办公AI智能小助手</description>
    <generator>Hugo</generator>
    <language>zh-cn</language>
    <copyright>qife</copyright>
    <lastBuildDate>Mon, 08 Dec 2025 01:41:12 +0800</lastBuildDate>
    <atom:link href="https://blog.qife122.com/tags/cve-2025-13828/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Mautic权限提升漏洞分析：非特权用户可任意安装卸载Composer包</title>
      <link>https://blog.qife122.com/p/mautic%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90%E9%9D%9E%E7%89%B9%E6%9D%83%E7%94%A8%E6%88%B7%E5%8F%AF%E4%BB%BB%E6%84%8F%E5%AE%89%E8%A3%85%E5%8D%B8%E8%BD%BDcomposer%E5%8C%85/</link>
      <pubDate>Mon, 08 Dec 2025 01:41:12 +0800</pubDate>
      <guid>https://blog.qife122.com/p/mautic%E6%9D%83%E9%99%90%E6%8F%90%E5%8D%87%E6%BC%8F%E6%B4%9E%E5%88%86%E6%9E%90%E9%9D%9E%E7%89%B9%E6%9D%83%E7%94%A8%E6%88%B7%E5%8F%AF%E4%BB%BB%E6%84%8F%E5%AE%89%E8%A3%85%E5%8D%B8%E8%BD%BDcomposer%E5%8C%85/</guid>
      <description>&lt;h3 id=&#34;cve-2025-13828---mautic非特权用户可在无marketplace访问权限的情况下安装和卸载composer包&#34;&gt;CVE-2025-13828 - Mautic非特权用户可在无Marketplace访问权限的情况下安装和卸载Composer包&lt;/h3&gt;&#xA;&lt;h4 id=&#34;概述&#34;&gt;概述&lt;/h4&gt;&#xA;&lt;p&gt;CVE-2025-13828是一个影响Mautic的严重安全漏洞，其CVSS 4.0评分为9.0（CRITICAL）。&lt;/p&gt;</description>
    </item>
  </channel>
</rss>
