The independent researcher who published a proof of concept before the release did not.
Just to clarify that no actual PoC was published, just a demonstration video was floating about.
The independent researcher who published a proof of concept before the release did not.
Just to clarify that no actual PoC was published, just a demonstration video was floating about.
And worth noting, Amazon’s MadPot started detecting exploit attempts four days before disclosure⁽¹⁾, so there were definitely other leaks long before “the video”.
⁽¹⁾ https://aws.amazon.com/blogs/security/amazon-threat-intellig...
Doesn't matter. They video signaled to attackers that it was discoverable so they all pointed their clankers at the PHP source to go and find it.