CVE-2020-28948

Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked

published November 19, 2020

CVSS
—
EPSS
47%
Percentile
98.8
In the wild
Unconfirmed
What it is

Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.47493 · 98.8th percentile
Published
2020-11-19T18:14Z
EPSS history
Timeline
  • 19 NOV 18:14Z
    Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked
    cvelistv5