Elari is temporarily offline due to security measures

What’s going on?

Two serious security vulnerabilities have been discovered in PHP. PHP is one of the most widely used programming languages for websites and web applications, and Elari uses it too. Our website www.elari.nl and the Knowledge Base don’t use PHP and remain available.

These vulnerabilities fall into one of the most severe categories. Attackers who exploit them can run their own code on a system and may be able to steal data. Attempts to exploit the vulnerabilities have already been seen. The Dutch National Cyber Security Centre (NCSC) warns that any system running PHP that can be reached via the internet is likely to be vulnerable until an update has been installed.

That’s why many organisations in the Netherlands are currently taking their websites and systems offline as a precaution.

What are we doing?

Our developers got to work straight away and have taken the measures that are possible right now. To protect your data as well as we can, we’ve decided to take Elari offline temporarily.

The makers of PHP are releasing an update today that closes the vulnerabilities. As soon as it’s available, we’ll install it immediately. After that, we’ll make Elari available again.

What does this mean for you?

For now, you can’t log in to Elari, either in the browser or in the app. We don’t know yet how long this will take.

We understand this is very inconvenient, especially if you planned to work in Elari today. But the security of your data comes first. You don’t need to do anything.

How can you stay informed?

We will post an update here as soon as there is news.

We apologise for the inconvenience and thank you for your understanding.

Elari