Post claims PHP RCE details leaked early, advises php.ini mitigation

A Mastodon post from HD Moore says PHP remote code execution details reportedly leaked early and recommends setting session.upload_progress.enabled to Off. The post is one item, with no official confirmation in the collected material.

Timeline

1. 21 Oct, 03:02 UTCUnconfirmed claim of early PHP RCE leak

Top sources

• It looks like the PHP RCE details leaked early, (partially) mitigate with `session.upload_progress.enabled = Off` in phpHD Moore