GitStock

pear/archive_tar · Security

Multiple vulnerabilities through filename manipulation in Archive_Tar

GHSA ID
GHSA-75c5-f4gw-38r9
CVE ID
CVE-2020-28949
Severity
high
Published
Updated
CVSS
7.8 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:H
CVSS v3
7.8 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:H

Description

Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed. See: https://github.com/pear/Archive_Tar/issues/33

CWEs

  • CWE-74 · Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

References