Comment on What's going on with PHP?
slazer2au@lemmy.world 3 weeks agoThe leaked info incorrectly called it a 10 so people are acting like a 10. But an unauthenticated RCE is always a big issue.
Comment on What's going on with PHP?
slazer2au@lemmy.world 3 weeks agoThe leaked info incorrectly called it a 10 so people are acting like a 10. But an unauthenticated RCE is always a big issue.
call_me_xale@lemmy.zip 3 weeks ago
It’s an unauthenticated RCE in very specific circumstances under particular configurations. We haven’t even seen functional exploits in the wild yet.
Rentlar@lemmy.ca 3 weeks ago
The fact that I haven’t heard of any major webservice involuntary taken over so far makes me increasingly skeptical, though I can also attribute it to preemptive action, partially. I presume an exploit chain might come in concert with some other insecure configurations or some malware developed eventually, but it wouldn’t be the first CVE with inflated scores in recent years.