Comment Comment by lol768 > edit: Mitigation for impacted versions is to set `session.upload_progress.enabled = Off` in php.iniI think this is only partial mitigation: https://x.com/Dinosn/status/2112717168349712734I have additionally followed the advice to just ban multipart uploads before the request even touches PHP (luckily my app doesn't use them at all). I do now know if this conclusively resolves it. parent lol768 11 days ago
I think this is only partial mitigation: https://x.com/Dinosn/status/2112717168349712734
I have additionally followed the advice to just ban multipart uploads before the request even touches PHP (luckily my app doesn't use them at all). I do now know if this conclusively resolves it.