CXS finding universal decoders in page cache files but site as a whole is clean
Posted: 13 Sep 2023, 02:14
I quite often receive cxswatch notifications such as this:
cxswatch Scanning /home/-----------/public_html/administrator/cache/page/6bcd733d21761eedca1b4bdf7116d137-cache-page-38b9d565663691ecd167624392049896.php:
'/home/--------/public_html/administrator/cache/page/6bcd733d21761eedca1b4bdf7116d137-cache-page-38b9d565663691ecd167624392049896.php'
Universal decode regex match = [universal decoder]
My server is filled with Joomla sites and all are up to date on patches, etc. but these universal decoder warnings keep getting sent out. Sometimes dozens at a time but they are all buried in a page cache file. cxswatch never finds anything like this in the general file folders of the site. Two questions:
1) are these warnings anything to be worried about? I am assuming they are all false positives since the scanner finds nothing in the normal file system.
2) if they are false positives how can I stop cxs from contantly sending me warnings about them all the time? This would also be nice to stop it from sending notifications of web upload script files that have been quarantined.
cxswatch Scanning /home/-----------/public_html/administrator/cache/page/6bcd733d21761eedca1b4bdf7116d137-cache-page-38b9d565663691ecd167624392049896.php:
'/home/--------/public_html/administrator/cache/page/6bcd733d21761eedca1b4bdf7116d137-cache-page-38b9d565663691ecd167624392049896.php'
Universal decode regex match = [universal decoder]
My server is filled with Joomla sites and all are up to date on patches, etc. but these universal decoder warnings keep getting sent out. Sometimes dozens at a time but they are all buried in a page cache file. cxswatch never finds anything like this in the general file folders of the site. Two questions:
1) are these warnings anything to be worried about? I am assuming they are all false positives since the scanner finds nothing in the normal file system.
2) if they are false positives how can I stop cxs from contantly sending me warnings about them all the time? This would also be nice to stop it from sending notifications of web upload script files that have been quarantined.