Skip to content

Product

php pear archive tar vulnerabilities

1 published CVE affecting php pear archive tar, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest php pear archive tar CVEs

Newest publication first

  1. CVE-2018-1000888 Archive_Tar contains Potential RCE if filename starts with phar://

    Published
    HighCVSS 8.8 EPSS 19.1% Public exploit PoC

    PEAR Archive_Tar version 1.4.3 and earlier contains a CWE-502, CWE-915 vulnerability in the Archive_Tar class. There are several file operations with $v_header['filename'] as parameter (such as file_exists, is_file, is_dir, etc). When extract is called without a specific prefix p...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.