Update urgent la php

[AlexH]

Daca rulezi PHP-FPM pe sereverul tau atunci trebuie sa faci update urgent pentru ca hacker iti poate lua acces la server.

https://lab.wallarm.com/php-remote-code-execution-0-day-discovered-in-real-world-ctf-exercise/

 

[AlexH]

O explicație a celor de la nginx despre aceasta vulnerabilitate.
Recomand sa citit si urmat pasii.

Addressing the PHP-FPM Vulnerability (CVE-2019-11043) with NGINX - NGINX

We provide guidance on using NGINX to mitigate the recently discovered vulnerability in PHP-FPM (CVE-2019-11043). The vulnerability is triggered when the PATH_INFO variable passed to PHP-FPM with an invalid value, which can happen in a common NGINX configuration.

www.nginx.com

Luati in calcul doar daca folosiți PHP-FPM cu nginx.
Daca folositi simplu PHP-FPM fara nginx, atunci update la PHP.