Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

arthas 4.0.4 被扫描出安全漏洞 #2986

Open
1 task done
gtyd opened this issue Jan 21, 2025 · 0 comments
Open
1 task done

arthas 4.0.4 被扫描出安全漏洞 #2986

gtyd opened this issue Jan 21, 2025 · 0 comments

Comments

@gtyd
Copy link

gtyd commented Jan 21, 2025 •
edited
Loading

  • 我已经在 issues 里搜索，没有重复的issue。

我们将arthas的jar包，集成到我们应用的Dockerfile中，方便在应用在运行中过程中做故障诊断，版本如下：

Manifest-Version: 1.0
Created-By: core engine team, middleware group, alibaba inc.
Build-Jdk-Spec: 21
Main-Class: com.taobao.arthas.boot.Bootstrap
Implementation-Title: arthas-boot
Implementation-Version: 4.0.4
Specification-Title: arthas-boot
Specification-Version: 4.0.4

但最近被安全团队扫描出有中危漏洞

Image

其指向的是这个版本

Image

具体漏洞描述链接：

https://www.oscs1024.com/hd/MPS-4bv1-8ho6
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@gtyd