В© 2005-2026
При любом использовании материалов сайта гиперссылка на TopClimat.ru обязательна. Цены, указанные на сайте, носят информационный характер и не являются публичной офертой.
Critical Security Risks in PHP 7.2.34: Exploits and End-of-Life Status
The Flaw: By passing specially crafted strings to certain functions (like unserialize()), an attacker can cause the PHP engine to reference a memory location that has already been freed. php 7.2.34 exploit github
Meet Alex, a skilled PHP developer who maintains a popular open-source project on GitHub. Alex's project relies heavily on PHP 7.2.34, which, unbeknownst to them, had a known vulnerability. Critical Security Risks in PHP 7
Moral of the story: Legacy PHP isn't nostalgia — it's negligence. And GitHub will always have the blueprint, seconds after the CVE drops. unbeknownst to them
To mitigate the vulnerability, the following strategies can be employed: