SecurityHacker Newsabout 3 hours ago
Critical PHP Heap Vulnerability Leaked
2 min read
A researcher leaked a heap use-after-free vulnerability in PHP session.upload_progress affecting versions 8.4.4 and 8.2.34. The flaw allows attackers to execute arbitrary system commands via cached bucket pointers. Specific mitigation steps include reloading PHP-FPM or tightening WAF rules for multipart POSTs before official patches arrive for stable versions like 8.5.11.
Level
Hype check
Tap to vote and see what everyone thinks.
