Cyber Security Center of the National Bank of Ukraine
Main Banks Non-banking financial sector Cyber fraud

CVE-2020-28948

Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.

Score

6.8

Source

http://nvd.nist.gov

Access-complexity

MEDIUM

Access-vector

NETWORK