Does anyone have any security information about where Box is with mitigating PHP2Shell? Our understanding is that Box does have PHP in use. It would be great to know if they have this mitigated with a WAF or where they stand on rolling out patched PHP versions etc. We’ve opened a support case and reached out to our account reps but we are not getting the level of technical detail we would like.
Question
Box progress on mitigating PHP2Shell?
Sign up
Already have an account? Login
Community access is available only with a Box Account.
Sign in with your Box AccountSign in to the Box Community
Community access is available only with a Box Account.
Sign in with your Box AccountEnter your E-mail address. We'll send you an e-mail with instructions to reset your password.