Login Request a demo
AT
Product
Archive Tar
by Php · last CVE Jul 30, 2021
On CISA KEVExploited in the wild
4
CVEs
2
On KEV
7.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 4Medium 0Low 0
Severity
All severities4Critical0High4Medium0Low0
Exploitation
On CISA KEV2Exploited in the wild2
Watch

Add Archive Tar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-28949
In wildKEV
7.8
85%
Nov 19
PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability
Affected: before 1.4.12
CVE-2020-36193
In wildKEV
7.5
71%
Jan 18
PEAR Archive_Tar Improper Link Resolution Vulnerability
Affected: through 1.4.11
CVE-2020-28948
7.8
47%
Nov 19
Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked
Affected: before 1.4.11
CVE-2021-32610
7.1
73%
Jul 30
In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193
Affected: before 1.4.14
Showing 4