Comment by t1234s
20 hours ago
Would blocking all multipart/formdata requests be a sufficient mitigation until the updated php version is available?
20 hours ago
Would blocking all multipart/formdata requests be a sufficient mitigation until the updated php version is available?
A PHP core dev suggested all the mitigations getting posted are not enough and that if possible you need to shut down any PHP app until the patch comes out https://phpc.social/@Girgias/117476510850918355
Yes that's what a lot of people are doing.
No. Take anything with PHP down until the patch if you can afford to do so.