WhatBrokeToday
FAQ
Today's Trends
highInvestigating

Danbooru Service Outage Caused by Malicious File Upload Compromising Accounts

  1. Investigating(current)
  2. Trending(upcoming)
  3. Workaround available(upcoming)
  4. Resolved(upcoming)

Executive summary

Danbooru suffered an outage and extended downtime due to a malicious file upload that compromised user accounts, triggering a security audit. The incident is unrelated to reported PHP vulnerabilities as their backend is built on Ruby.

No verified workaround yet

None of the linked reports describe a mitigation. Follow this incident to hear when one appears.

Technical root cause

A malicious file was uploaded which compromised user accounts, leading to a prolonged outage while security audits are conducted.

Evidence

1 report · 1 BlueskyShow
  1. [1]
    Bluesky First report
    danbooru's outage is unrelated to that php vuln, someone uploaded a malicious file that compromised user accounts and they've said the long period of delay is because they're doing some sort of security audit while things are down(opens Bluesky post in a new tab)

    danbooru's outage is unrelated to that php vuln, someone uploaded a malicious file that compromised user accounts and they've said the long period of delay is because they're doing some sort of security audit while things are down pretty sure their backend is ruby and not php anyway

    by shikaspots.bsky.social 8upvotes 1comments

Timeline

  1. First report on Bluesky post

    danbooru's outage is unrelated to that php vuln, someone uploaded a malicious file that compromised user accounts and they've said the long period of delay is because they're doing some sort of security audit while things are down

    Source