PHP2Shell Security Update: Purplepass Is Patched and Protected
Purplepass has been fully patched against the recently disclosed PHP2Shell vulnerabilities. Our team updated all PHP systems across our platform as soon as the security release became available, including the systems supporting our website, box office, administrative tools, and apps.What happened?
PHP, a programming language used by many websites, recently released emergency fixes for two critical security vulnerabilities known as PHP2Shell. On unpatched systems, these vulnerabilities could allow attackers to execute unauthorized code, potentially exposing data or disrupting services. Their severity and widespread impact prompted urgent action throughout the technology industry.How we protected Purplepass
We immediately deployed the patched PHP release across our entire platform, fixing both vulnerabilities at their source. Purplepass also uses AWS Web Application Firewall (WAF) through Amazon CloudFront to help block malicious traffic before it reaches our servers. This protection was already in place before the patch. The AWS-managed PHP ruleset we use receives automatic security updates, adding defenses against known PHP2Shell attack patterns as AWS releases them.What this means for you
No action is required on your part to address these vulnerabilities within Purplepass. You can continue managing events and selling tickets as usual. Our immediate patching and ongoing firewall protection work together to safeguard our platform, our clients, and their data.
