4 ms·
SA-CORE-2020-013 is one of them.
by gzurl 3y ago
SA-CORE-2020-013 is one of them.
- tyingq 3y agoDoes is prevent it, or just limit the arbitrary PHP execution to inside the WASM sandbox? If the latter, that's still helpful, but still leaves quite a few of the typical end goals in place...like altering the content presented to visitors, etc.
- captn3m0 3y agoyup, PHP RCE inside the PHP WASM sandbox is not much different in scope than PHP RCE inside a drupal apache container more or less - you get RW on the complete drupal instance.