3 ms·

In the meantime, can you confirm that the disabling of XML and YAML inputs fully mitigates the RCE as well as the SQLi?

• judofyr 14y ago
  Yes.
• tptacek 14y ago
  The vectors for both are the same. The term "SQLI" here is very misleading.