FLAT-XXWWL – Vulnerability | Fluid Attacks Database

Database

Description

directory traversal

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
packagist	drupal/core-recommended	>=7.0 <7.78 \|\| >=8.9.0 <8.9.13 \|\| >=9.0.0 <9.0.11 \|\| >=9.1.0 <9.1.3	8.0.0, 8.9.13, 9.0.11, 9.1.3
debian 13	php-pear	>=0 <1:1.10.12+submodules+notgz+20210212-1	1:1.10.12+submodules+notgz+20210212-1
debian 12	php-pear	>=0 <1:1.10.12+submodules+notgz+20210212-1	1:1.10.12+submodules+notgz+20210212-1
packagist	pear/archive_tar	>=0 <1.4.13	1.4.13
packagist	drupal/drupal	>=7.0 <7.78 \|\| >=8.9.0 <8.9.13 \|\| >=9.0.0 <9.0.11 \|\| >=9.1.0 <9.1.3	7.78, 8.9.13, 9.0.11, 9.1.3
debian 11	php-pear	>=0 <1:1.10.12+submodules+notgz+20210212-1	1:1.10.12+submodules+notgz+20210212-1
debian 14	php-pear	>=0 <1:1.10.12+submodules+notgz+20210212-1	1:1.10.12+submodules+notgz+20210212-1
packagist	drupal/core	>=7.0 <7.78 \|\| >=8.9.0 <8.9.13 \|\| >=9.0.0 <9.0.11 \|\| >=9.1.0 <9.1.3	7.78, 8.9.13, 9.0.11, 9.1.3
rpm rhel8.4	php	<0:7.4.6-5.module+el8.4.0+15727+276bb227	0:7.4.6-5.module+el8.4.0+15727+276bb227
rpm rhel8	php	<0:7.4.19-4.module+el8.6.0+16316+906f6c6d	0:7.4.19-4.module+el8.6.0+16316+906f6c6d

1-10 of 15

10

Aliases

1. CVE-2020-361932. NVD-2020-361933. OSV-2020-361934. OSV-DEBIAN-2020-361935. GCVE-2020-361936. SECURITY-TRACKER-CVE-2020-361937. security.gentoo.org8. lists.debian.org9. lists.debian.org

References

1. https://github.com/pear/Archive_Tar/issues/352. https://github.com/pear/Archive_Tar/commit/cde460582ff389404b5b3ccb59374e9b389de9163. https://www.drupal.org/sa-core-2021-0014. https://www.debian.org/security/2021/dsa-48945. https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-361936. https://lists.fedoraproject.org/archives/list/[email protected]/message/YKD5WEFA4WT6AVTMRAYBNXZNLWZHM7FH7. https://lists.fedoraproject.org/archives/list/[email protected]/message/VJQQYDAOWHD6RDITDRPHFW7WY6BS3V5N8. https://lists.fedoraproject.org/archives/list/[email protected]/message/FOZNK4FIIV7FSFCJNNFWMJZTTV7NFJV29. https://lists.fedoraproject.org/archives/list/[email protected]/message/42GPGVVFTLJYAKRI75IVB5R45NYQGEUR10. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YKD5WEFA4WT6AVTMRAYBNXZNLWZHM7FH11. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VJQQYDAOWHD6RDITDRPHFW7WY6BS3V5N12. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FOZNK4FIIV7FSFCJNNFWMJZTTV7NFJV213. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/42GPGVVFTLJYAKRI75IVB5R45NYQGEUR14. https://github.com/FriendsOfPHP/security-advisories/blob/master/pear/archive_tar/CVE-2020-36193.yaml

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.