Description

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

Remediation

References

CVE-2020-36193

Related Vulnerabilities

MySQL CVE-2014-4258 Vulnerability (CVE-2014-4258)

SharePoint CVE-2023-21742 Vulnerability (CVE-2023-21742)

Jenkins Server-Side Request Forgery (SSRF) Vulnerability (CVE-2018-1000067)

Dotclear Other Vulnerability (CVE-2007-1989)

Django Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2019-19844)

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities CWE-59 CVE-2020-36193