Ash Mnesia层缺少主键唯一性检查导致记录覆盖漏洞 (CVE-2025-8275)

漏洞关键信息总结 漏洞概述 标题：Ash 中 Mnesia 数据层缺少唯一性检查，导致 动作可覆盖已有记录 CVE ID：CVE-2025-8275 包： （Erlang） 受影响版本： 已修复版本： 严重度：Medium（5.9 / 10） CVSS 向量： 弱点：CWE-384 协调者：mianchen 影响范围 Mnesia 数据层的 动作未强制主键唯一性：请求若命名了已存在的主键，会静默销毁并替换原记录，且无需认证或策略检查即可触发。 任何暴露 Mnesia 后端资源、且主键由客户端控制的场景均受影响，即使处于完整认证和策略检查之后。 修复方案 升级 至 3.32.2 或更高版本。 POC 代码（完整提取） ```erlang -module(no_warn_undefined). Code.get_compiler_option(no_warn_undefined, Elixir.Unit(Elixir.Project.Module, Elixir.Code.Module rn_local:[{fash, "3.32.1"}, {hanabi, "1.12.5"}, {req, "0.7.3"}, {sample_tar, ">= 0.1 and :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delete_table(table) do {:ok, _ok} -> :ok {:error, reason} -> Bash.start_link(Poc.Router, [], {:ok, _ok, port: 0, start_loop: false}) end table = :poc_profiles case Mnesia.delet

目标达成感谢每一位支持者 — 我们达成了 100% 目标！

Ash Mnesia层缺少主键唯一性检查导致记录覆盖漏洞 (CVE-2025-8275)

同源更多文章

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

Ash Mnesia层缺少主键唯一性检查导致记录覆盖漏洞 (CVE-2025-8275)

同源更多文章

目标达成感谢每一位支持者 — 我们达成了 100% 目标！