#session-upload-progress

4 stories this week · 4 this month · 4 in 6 months · mostly security

Stories per day · 30 days

3 stories, newest first · one card per story

Working demos need an 8 MB memory limit, one prefork worker and on-box library offsets, and commands are capped at 14 bytes.

Only apps that switch the session serialize handler at runtime and leave upload progress on are exposed; no attacks on this bug are reported.

No attacks are reported, PHP offered no workaround, and disabling upload progress is not a full fix.

Stories tagged #session-upload-progress