PHP2Shell: Critical PHP flaws hit mod_php servers hardest

T2Covered by 1 source · first reported by Notebookcheck at 21 Oct, 19:52 UTC

PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35 fix two critical flaws that allow unauthenticated code execution, in some setups before any application code runs. Here is what goes wrong in the interpreter, which SAPIs are most exposed and which interim mitigations PHP recommends.

hardware

Sources

• T2PHP2Shell: Critical PHP flaws hit mod_php servers hardestNotebookcheck21 Oct, 19:52