No Way, PHP Strikes Again! (CVE-2024-4577)
labs.watchtowr.com
Orange Tsai tweeted a few hours ago about “One of [his] PHP vulnerabilities, which affects XAMPP by default”, and we were curious to say the least. XAMPP is a very popular way for administrators and developers to rapidly deploy Apache, PHP, and a bunch of other tools, and any bug
The original post: /r/blueteamsec by /u/digicat on 2024-06-08 05:16:03.

Original Title: No Way, PHP Strikes Again! (CVE-2024-4577) - Fortunately, for defenders, the bug has only been exploited on Windows-based PHP installations (where PHP is specifically used in CGI mode), under some specific locales: