Major PHP Vulnerability Leaked

A significant vulnerability in PHP has been leaked, which could allow an attacker to bypass security measures and execute arbitrary code on a server. The vulnerability is present in PHP versions 7.4.24 and later, and 8.0.10 and later. It affects the 'up' function, which is used to check if a file exists. The vulnerability was discovered by a security researcher named 'fuzz' on the PHP bug tracker, where it has been assigned the ID 'CVE-2022-24713'. The vulnerability is currently being addressed by the PHP developers, who are working on a patch. In the meantime, users are advised to upgrade to PHP 7.4.25 or later, or PHP 8.0.11 or later.