rce
-
https://github.com/disrex-group/stylesmuggler-mitigation/tree/main
Step-by-step detection and cleanup for the unauthenticated RCE, plus nginx/Apache rules to block active campaigns and a Composer module/patch that makes DI scanners CLI-only (works on 2.4.6–2.4.9).