cognitive cybersecurity intelligence

News and Analysis

Search

Attacker Probing for New PHP Vulnerablity CVE-2024-4577

Honeypots have detected probes for a PHP vulnerability CVE-2024-4577, first found by Orange Tsai and elaborated by Watchtwr Labs. The vulnerability, which could potentially lead to OS command injection when PHP is used in CGI mode, allows attackers to bypass the Apache escape process. An exploit matching this pattern was detected. PHP released updates last week to address the vulnerability.

Subscribe to newsletter

Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.

More Posts