PHP2Shell exposes the weakness in coordinated vulnerability disclosure
6 Articles
6 Articles
CSO Online
PHP2Shell exposes the weakness in coordinated vulnerability disclosure
Two critical vulnerabilities discovered in the widely-used PHP programming language have shaken up enterprises, and the ramifications will take some time to truly understand. But one of the lesser-known stories centers around disclosure. According to The PHP Foundation, several organizations had agreed to a coordinated release detailing the critical flaws and mitigation actions, but cybersecurity firm Chainguard “unlaterally” broke this embargo.…
The first attempts to exploit PHP2Shell faults have been ahead of their coordinated disclosure by four days, which moves companies' response from the patch to the survey. Applying the October 21 update closes the door without saying if anyone has entered in the meantime, and tracking becomes the decisive step, on servers where PHP [...]
Coverage Details
Bias Distribution
- 100% of the sources are Center
Factuality
To view factuality data please Upgrade to Premium
