Delta4 and Tymbrel | Pro-active Response to Global PHP Security Exploit

A significant security vulnerability affecting PHP applications that accept file uploads has been identified and is impacting all PHP applications on all platforms, globally. As a precautionary measure, we have proactively reduced at-risk Tymbrel functionality in advance of PHP Group releasing a software patch. At this stage we are actively in the processes of deploying the patch to secure Tymbrel sites.

Current Status: Online, Service Restored

1:30pm EST: We have successfully applied the patch released by PHP Group and restored full functionality to the Tymbrel platform.

Global PHP Exploit Affecting Tymbrel

While there is no known threat to Tymbrel sites specifically, given the severity of this issue and the broad impact, we are proactively limiting website forms with file upload fields and some Tymbrel website management tools for the time being.

While some companies around the world are taking their platforms completely offline, this targeted approach keeps your website fully up and running:

• Forms without file uploads will continue to work as normal.
• Forms with file upload fields will be unavailable until the patch is applied.
• No action is required on your part.

When full functionality has been restored this blog will be updated with this information and active clients engaged in support tickets around this work will be notified.

Please use the form below to self-identify as a Tymbrel user to receive updates related to Tymbrel status automatically in the future.