Safeguard
Tag

path-disclosure

Safeguard articles tagged "path-disclosure" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerability Analysis

PHP-FPM/Nginx path disclosure RCE (CVE-2019-11043)

CVE-2019-11043 let attackers gain unauthenticated RCE on PHP-FPM/Nginx stacks via a PATH_INFO underflow. Here's the impact, timeline, and fixes.

Jan 17, 20267 min read
path-disclosure — Safeguard Blog