PHP-FPM with Nginx
criticalCVSS 9.8
Underflow in the FastCGI path info handling allows remote code execution.
Dampak
Unauthenticated code execution on common Nginx + PHP-FPM setups.
Perbaikan
Upgrade PHP to 7.1.33, 7.2.24, 7.3.11 or later and review Nginx fastcgi_split_path_info.
Referensi resmi
https://nvd.nist.gov/vuln/detail/CVE-2019-11043Apakah situs Boss terdampak?
VulScan Pro mencocokkan versi komponen yang terdeteksi dengan CVE yang relevan, termasuk CVE-2019-11043.
Jalankan audit gratis