3 ms·
Only sites which have error reporting enabled are vulnerable, so no need to panic unless you're displaying errors in production.
by cbg0 13y ago
Only sites which have error reporting enabled are vulnerable, so no need to panic unless you're displaying errors in production.
- iWKtMK 13y agoAll sites were vulnerable to authenticating as other users or tampering with ciphertexts. Error reporting enables the RCE. However, I still hope that nobody is vulnerable or panicking since this was reported and fixed last year.