Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: PHP 7.2.28, 7.3.15, 7.4.3 Clear all filters
TI-2020-05702 CVE-2020-7063 · GHSA-rm3c-r6h9-r9rg

Files added to tar with Phar::buildFromIterator have all-access permissions

Priority LOW 28

In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) ev…

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.01594 Published 2020-02-27 Partial fix · 7.3.15, 7.4.3 +1 CWE-281
TI-2020-05701 CVE-2020-7062 · GHSA-rrwc-c46p-f3v6

Null Pointer Dereference in PHP Session Upload Progress

Priority LOW 39

In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when using file upload functionality, if upload progress tracking is enabled, but session.upload_progress.cleanup is set to 0 (disabled), and…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03581 Published 2020-02-27 Partial fix · 7.3.15, 7.4.3 +1 CWE-476