The vulnerability relates to a conflict between how PHP handles arrays in parameters, and Drupal's use of the hash (#) in at the beginning of array keys to signify special keys that typically result in further computation, leading to the ability to inject code arbitrarily, according to Drupal's security advisory.
from Google Alert - vulnerability https://ift.tt/2GVyKhg
via IFTTT
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment