CVE-2024-24754

Bref enable serverless PHP on AWS Lambda. When Bref is used with the Event-Driven Function runtime and the handler is a RequestHandlerInterface, then the Lambda event is converted to a PSR7 object. During the conversion process, if the request is a MultiPart, each part is parsed and its content...

CVE-2024-24754 Bref Body Parsing Inconsistency in Event-Driven Functions

Bref enable serverless PHP on AWS Lambda. When Bref is used with the Event-Driven Function runtime and the handler is a RequestHandlerInterface, then the Lambda event is converted to a PSR7 object. During the conversion process, if the request is a MultiPart, each part is parsed and its content...

CVE-2024-24754

creationtimestamp| type| source ---|---|--- 2024-02-01 15:36:55+00:00| published-proof-of-concept| https://github.com/brefphp/bref/security/advisories/GHSA-82vx-mm6r-gg8w 2024-02-01 17:31:56+00:00| seen| https://t.me/ctinow/177698 2024-02-24 09:41:17+00:00| seen| https://t.me/ctinow/192511...