Description
Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.
Remediation
References
Related Vulnerabilities
Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2021-38268)
WordPress Plugin DMSGuestbook Multiple Remote Vulnerabilities (1.8.0)
WordPress Plugin Search Exclude Security Bypass (1.2.2)
SharePoint CVE-2020-17061 Vulnerability (CVE-2020-17061)
WordPress Plugin Digital River Global Commerce Supply Chain Attack [Polyfill.io] (2.0.2)