60
CVE-2020-28948
- CVSS 3.1
- 7.8 high
- EPSS
- 47%p99
- Published
- ·
- Modified
Description · NVD
Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.
- Vendors
- phpdebianfedoraprojectdrupal
- Products
- archive tar, debian linux, fedora, drupal
- Weakness
- CWE-502
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H