PHP Sårbarhed annonceret - Upload kapaciteter deaktiveret
- identified
Som en forholdsregel, vi har midlertidigt deaktiveret upload funktionalitet på fællesskabet. I løbet af denne tid, medlemmer vil ikke være i stand til at uploade filer, herunder inline billeder, profil avatarer, og indlæg vedhæftede filer. Alle andre fællesskabsfunktioner, herunder læsning, udstationering og svar, er upåvirket. Vi har ikke set nogen indvirkning på kundedata eller samfundets tilgængelighed. Vi forventer at gendanne uploads, når vores arbejde er afsluttet, og vil opdatere denne side, så snart vi har mere information.
- identified
Vi overvåger fortsat platformen nøje. Vores undersøgelse har ikke fundet beviser på, at det sikkerhedsspørgsmål, vi behandler, blev udnyttet. Filuploads forbliver midlertidigt deaktiveret som en forholdsregel, og vi arbejder på at genoprette dem så hurtigt som muligt. Vi vil holde denne side opdateret som situationen udvikler sig.
- identified
PHP-sårbarhed (PHP2Shell): uploads midlertidigt deaktiveret Gainsight Customer Communities bruger PHP. Den 20. oktober blev to kritiske sårbarheder i PHP selv (CVE- 2026- 109618 og CVE- 2026- 109619, kendt som PHP2Shell) afsløret forud for den officielle rettelse. PHP sikkerhedsteamet frigiver fixet i dag, 21. oktober kl 16: 00 CEST (14: 00 UTC). Hvad vi har gjort: Deaktiveret alle filer uploads på tværs af alle samfund, herunder inline billeder, profil avatarer og indlæg vedhæftede filer. Sæt ekstra firewall beskyttelse på plads mod den type anmodning, der anvendes i disse angreb. Anmeldt vores logfiler for tegn på udnyttelse. Indtil videre har vi ingen beviser for, at sårbarheden blev udnyttet på vores platform. Hvad sker der så? Vi vil anvende PHP sikkerhedsopdateringen på tværs af vores EMEA og US infrastruktur, så snart det er udgivet. Efter lapping, vil vi køre en komplet kompromis gennemgang og dele resultatet her. Vi genopretter uploads, når plasteret er påsat og bekræftet. Læse, poste og besvare arbejde som normalt. Vores næste opdatering er kl. 17: 00 CEST, eller før hvis noget ændres.
- identified
Vi fortsætter med at arbejde på en løsning på dette problem.
- identified
Opdatering: PHP sikkerhedsteamet har frigivet fixet. Vi validerer den nu og tester den mod vores platform. Vi vil anvende det på tværs af vores EMEA og USA infrastruktur, når testen er færdig. Filuploads forbliver midlertidigt deaktiveret, indtil fixet er indsat og verificeret. Vores overvågning viser stadig ikke, at sårbarheden blev udnyttet på vores platform. Læsning, udstationering og svar fortsætter med at fungere som normalt. Vores næste opdatering vil være ved 5PM CEST, eller før hvis noget ændres.
- identified
Opdatering: Vi tester den udgivne rettelse for at sikre, at vi ikke indføre nogen regressioner. Filuploads forbliver midlertidigt deaktiveret, indtil fixet er indsat og verificeret. Vores overvågning viser stadig ikke, at sårbarheden blev udnyttet på vores platform. Læsning, udstationering og svar fortsætter med at fungere som normalt. Vores næste opdatering vil være ved 6PM CEST, eller før hvis noget ændres.
- identified
Opdatering: Vi tester den udgivne rettelse for at sikre, at vi ikke indføre nogen regressioner. Filuploads forbliver midlertidigt deaktiveret, indtil fixet er indsat og verificeret. Vores overvågning viser stadig ikke, at sårbarheden blev udnyttet på vores platform. Læsning, udstationering og svar fortsætter med at fungere som normalt. Vores næste opdatering vil være ved 7PM CEST, eller før hvis noget ændres.
- identified
Update: We are completing the testing in staging before deploying to production. File uploads remain temporarily disabled until the fix is deployed and verified. Our monitoring continues to show no evidence that the vulnerability was exploited on our platform. Reading, posting and replying continue to work as normal. Our next update will be by 8:30PM CEST, or sooner if anything changes.
- monitoring
Update: The PHP security fix has been deployed to production and we are continuing to monitor closely. We have found no evidence that the vulnerability was exploited on our platform. File uploads remain temporarily disabled out of an abundance of caution. Reading, posting and replying work as normal. Next update by 08:00AM CEST, or sooner if anything changes.
- monitoring
Update: We are continuing to monitor and have found no evidence that the vulnerability was exploited on our platform. File uploads remain temporarily disabled out of an abundance of caution. Reading, posting and replying work as normal. Next update by 10:00AM CEST, or sooner if anything changes.
- monitoring
Update: We are continuing to monitor and have found no evidence that the vulnerability was exploited on our platform. File uploads remain temporarily disabled out of an abundance of caution. Reading, posting and replying work as normal. Next update by 12:00PM CEST, or sooner if anything changes.
- monitoring
Update: We are continuing to monitor and have found no evidence that the vulnerability was exploited on our platform. File uploads remain temporarily disabled out of an abundance of caution. Reading, posting and replying work as normal. Next update by 3:00PM CEST, or sooner if anything changes.
- monitoring
Update: We are continuing to monitor and have found no evidence that the vulnerability was exploited on our platform. File uploads remain temporarily disabled out of an abundance of caution. Reading, posting and replying work as normal. Next update by 6:00PM CEST, or sooner if anything changes.
- monitoring
Update: We are continuing to monitor and have found no evidence that the vulnerability was exploited on our platform. File uploads that render in the page remain temporarily disabled out of an abundance of caution. Reading, posting and replying work as normal. Attachments of files pdf, zip, txt is again possible. Next update by 10:00PM CEST, or sooner if anything changes.
- monitoring
Update: We are continuing to monitor and have found no evidence that the vulnerability was exploited on our platform. File uploads that render in the page remain temporarily disabled out of an abundance of caution. Reading, posting and replying work as normal. Attachments of files pdf, zip, txt is again possible. Next update by 10:00AM CEST, or sooner if anything changes.
- monitoring
Update: We are continuing to monitor and have found no evidence that the vulnerability was exploited on our platform. Image file uploads that render in the page remain temporarily disabled out of an abundance of caution. Reading, posting and replying work as normal. We will have an update on restoring image file uploads by end of day. Attachments of files pdf, zip, txt is again possible. Next update by 6:00PM CEST, or sooner if anything changes.
- monitoring
Update: We are continuing to monitor and have found no evidence that the vulnerability was exploited on our platform. Image file uploads that render in the page remain temporarily disabled out of an abundance of caution. Reading, posting and replying work as normal. We have started reworking the concerned services to ensure we can restore image uploads as fast as possible. We will have a firm ETA by 25 Sunday 12pm CET Attachments of files pdf, zip, txt is again possible. Next update by 12:00PM CEST, or sooner if anything changes.
- monitoring
Uploads restored: Uploads are available again in all Gainsight Customer Communities. No action is needed. We will continue to monitor closely.
Automatisk oversat fra den officielle hændelsesopdatering.