Fix pre-auth arbitrary file write via unsafe deserialization in redis/memcache session handler
Disable GuzzleHttp\Cookie\FileCookieJar instantiation.
Reported by y0us.
Description
Description
Details
Details
- Provenance
machniak Authored on Tue, Mar 17, 2:11 PM mollekopf Pushed on Wed, Mar 18, 2:18 PM - Parents
- R113:dbdda5a06ae5: Don't use str_contains()
- Branches
- Unknown
- Tags
- Build Status
Buildable 57192