CVE-2020-36193

PEAR Archive_Tar Improper Link Resolution Vulnerability

Archive Tar

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

18. Jan 2021

Ausgewertete Quellen

• Debian
  https://lists.debian.org/debian-lts-announce/2021/01/msg00018.html
• Debian
  https://lists.debian.org/debian-lts-announce/2021/04/msg00007.html
• Debian
  https://www.debian.org/security/2021/dsa-4894
• Hinweis
  https://security.gentoo.org/glsa/202101-23
• Hinweis
  https://www.drupal.org/sa-core-2021-001
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-36193
• CISA
  PEAR Archive_Tar Improper Link Resolution Vulnerability
• NVD
  CVE-2020-36193