PHP archive_tar 1.4.7

CPE Details

PHP archive_tar 1.4.7
php
archive_tar
1.4.7
2020-12-02
14h35 +00:00
2020-12-02
14h35 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:php:archive_tar:1.4.7:*:*:*:*:*:*:*

Informations

Vendor

php

Product

archive_tar

Version

1.4.7

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-32610 2021-07-27 03h21 +00:00 In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.
7.1
High
CVE-2020-36193 2021-01-18 19h24 +00:00 Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.
7.5
High
CVE-2020-28949 2020-11-19 18h14 +00:00 Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.
7.8
High
CVE-2020-28948 2020-11-19 17h14 +00:00 Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.
7.8
High