Half-Initialized Workers: Verifying the PHP2Shell Fix When the Failure Path Is the Vulnerability
DEV Community
Half-Initialized Workers: Verifying the PHP2Shell Fix When the Failure Path Is the Vulnerability
Patching PHP2Shell is not finished at package upgrade: the crash path is the exploit path, and worker state can survive the fix until the pool is recycled. A verification checklist for operators.
0 comments
No comments yet.