Vulnerabilidades do Php Archive Tar

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Php Archive Tar: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:php:archive_tar

CVE-2020-36193 Alta · 7.5 KEV Alta · 59 CWE-22 18/01/2021

PEAR Archive_Tar Improper Link Resolution Vulnerability

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

CVE-2020-28949 Alta · 7.8 KEV Alta · 68 Exploit público 19/11/2020

PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability

Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.