Vulnerabilitymedium

Drupal fixed a new flaw related PEAR Archive_Tar library

Security Affairsby @securityaffairsJan 22, 2021 · 08:25 UTC (Jan 22, 2021)1 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2020-36193 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2020-36193 CVE-2020-28948

Tags: cve-2020-36193 cve-2020-28948 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2020-28948	Archive_Tar through 1.4.10 allows an unserialization attack because phar	7.8	47%	PoC	Nov 19, 2020
CVE-2020-36193	Symlink Directory Traversal File Write in PEAR Archive_Tar (PHP, Drupal, Debian, Fedora)	7.5	71%	KEV	Jan 18, 2021 KEV Aug 25, 2022

From the original article

1 min read at securityaffairs.com

Drupal development team released security updates to address a vulnerability that resides in the PEAR Archive_Tar third-party library. The Drupal development team has released security updates to address the CVE-2020-36193 vulnerability in the PEAR Archive_Tar third-party library. The PEAR Archive_Tar class provides handling of tar files in PHP.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.