Php Archive Tar vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Php Archive Tar: 2 record(s), with affected versions and fixes.
cpe:2.3:a:php:archive_tar

CVE-2020-36193 High · 7.5 KEV High · 59 CWE-22 Jan 18, 2021

PEAR Archive_Tar Improper Link Resolution Vulnerability

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

CVE-2020-28949 High · 7.8 KEV High · 68 Public exploit Nov 19, 2020

PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability

Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.