php2shell: NetScaler, PHP and what to do today
php2shell is a pair of critical unauthenticated RCE vulnerabilities in PHP's multipart form parsing, fixed in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35. Citrix has since released fixed NetScaler builds (14.1-73.49, 13.1-64.32); this post covers both halves of the NetScaler story: upgrading the management interface, and responder policies that shield PHP applications behind the NetScaler while you patch them.
Read More