Clockwork PHP Page Exposure

Clockwork is a PHP development tool that runs in your browser. For HTTP requests, commands, queue tasks, and tests, Clockwork provides insight into your application runtime, including request data, performance metrics, log entries, database queries, cache queries, redis commands, dispatched events, queued jobs, rendered views, and more. This was affected by a vulnerability which on successful exploitation causes PHP page exposure.

Mitigation / Precaution

In order to patch this vulnerability, please install the official patch the vendor made available for supported, vulnerable instances.

Written by

Anandhu K A

Lead Engineer