Summary

In this post, we deep-dive into the world of CVE-2024-42007 - a path traversal vulnerability in PHP-SPX project. We work through the lab setup and analyze (and exploit) the vulnerability from both blackbox and whitebox perspective. Based on our analysis, we check the effectiveness of the mitigation.

Description