Research collected from outside sources and what this site derives from them; every fact links to a saved copy of its source Research or story?
Frameworks / FIRST TLP 2.0
FIRST TLP 2.0: the php2shell risks it governs
The labels for sharing under embargo: the mitigation advice given early to critical-infrastructure providers, and its possible leak, is a TLP question.
Full name FIRST Traffic Light Protocol 2.0 · Publisher FIRST · Version 2.0, August 2022 · the official text
Clauses and controls
| Control | What it asks (paraphrased) | Risks mapped | Owned or regulated by |
|---|---|---|---|
| TLP:AMBER | Limited disclosure: recipients share only within their organisation and its clients on a need-to-know basis | no risk mapped | |
| TLP:AMBER+STRICT | Limited disclosure: recipients share only within their organisation | R02 The coordinated disclosure broke before the fix was ready 20 critical R02-2 Early mitigation advice to a few providers leaked 9 medium | The PHP security team |