Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-36193

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-rpw6-9xfx-jvcx

Directory Traversal in Archive_Tar Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948. ### :exclamation: Note: There was an initial fix https://github.com/pear/Archive_Tar/commit/cde460582ff389404b5b3ccb59374e9b389de916 for this vulnerability made in version `1.4.12`. That fix introduced a bug which was fixed in 1.4.13 https://github.com/pear/Archive_Tar/pull/36. Therefore we have set the first-patched-version to `1.4.13` which the earliest working version that avoids this vulnerability.

gitlab/packagist/drupal/core/CVE-2020-36193

Path Traversal `Tar.php` in Archive_Tar allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

gitlab/packagist/drupal/core-recommended/CVE-2020-36193

Path Traversal Tar.php in Archive_Tar allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

gitlab/packagist/drupal/drupal/CVE-2020-36193

Path Traversal `Tar.php` in Archive_Tar allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

gitlab/packagist/pear/archive_tar/CVE-2020-36193

Directory Traversal in Archive_Tar Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.