How We Audited a High-Traffic PHP Enterprise Stack on Linode and Mitigated XML External Entity (XXE) injection in old SOAP integrations
Auditing the Linode PHP Enterprise Stack Our recent engagement involved a high-traffic PHP enterprise application hosted on Linode. The primary objective was to conduct a comprehensive security audit, with a specific focus on identifying and mitigating vulnerabilities within legacy SOAP integrations. The stack comprised several interconnected PHP services, a MySQL database cluster, and various caching […]