CVE-2020-36193
Known Exploited (CISA KEV)HIGH
7.5
CVSS Severity Score
Vulnerability Description
Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.
Affected Platforms (CPE)
📦
Php
Archive Tar
<= 1.4.11💻
Fedoraproject
Fedora
= 32💻
Fedoraproject
Fedora
= 33💻
Fedoraproject
Fedora
= 34💻
Fedoraproject
Fedora
= 35💻
Debian
Debian Linux
= 9.0💻
Debian
Debian Linux
= 10.0📦
Drupal
Drupal
>= 7.0 and < 7.78📦
Drupal
Drupal
>= 8.9.0 and < 8.9.13📦
Drupal
Drupal
>= 9.0.0 and < 9.0.11📦
Drupal