Pixelfed admins warn of suspicious sign-ups tied to a PHP vulnerability

A post on Mastodon attributed to Pixelfed says servers with uploads disabled are seeing suspicious registrations, likely testing a PHP vulnerability. It urges admins to shut down servers until PHP is patched.

Timeline

1. 21 Oct, 10:14 UTCUnverified warning about PHP exploit attempts

Top sources

• We are aware of servers that have disabled uploads are getting suspicious user registrations, likely to test the php vulpixelfed