PEAR 2

Organization

CVE-2020-28949: PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Aug 25, 2022

PEAR Archive_Tar allows an unserialization attack because phar: is blocked but PHAR: is not blocked. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known...

Vulnerabilities & Patching

CVE-2020-36193: PEAR Archive_Tar Improper Link Resolution Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Aug 25, 2022

PEAR Archive_Tar Tar.php allows write operations with directory traversal due to inadequate checking of symbolic links. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP...

Vulnerabilities & Patching