CVE-2020-28949 PEAR Archive_Tar
PEAR Archive_Tar allows an unserialization attack because phar: is blocked but PHAR: is not blocked. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat…
- CVSS
- not scored
On CISA’s exploited list
PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability
- Added
- 2022-08-25
- Federal patch deadline
- 2022-09-15
- Ransomware use
- not known