There isn't an easy exploit for this PHP vulnerability
A PHP vulnerability, identified as CVE-2023-29360, has been found in the PHP 8.2.0 release, but researchers say it's not easily exploitable. The vulnerability is caused by a use-after-free bug in the 'object' function in the Zend Engine. The bug is not easily exploitable because the attacker needs a specific sequence of events to occur, making it difficult to trigger. The PHP team has not released a fix yet, but they are working on it.
Read the full article at eliastaylor.com →