CVE-2024-4577: Windows best-fit conversion crosses the CGI boundary

The Windows CGI pool starts interpreters with options absent from the Apache route configuration. Contain the exposed path and restore the affected workflow without weakening its security boundary.

Jamie Engineering lead · 02:13 a.m.

Online store / eu-west. Investigate php-cgi, restore service, and verify the result.