PT-2019-20239 · Php · Php

Publicado 2019-01-30 · Atualizado 2019-01-30

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions PHP versions prior to the fixed version

Description The issue allows the unserialization of user-provided data using the phar:// wrapper. This could potentially lead to security problems.

Recommendations For PHP versions prior to the fixed version, update to a version that includes the security fix to prevent the unserialization of user-provided data. As a temporary workaround, consider restricting the use of the phar:// wrapper until a patch is available.

Identificadores relacionados

MGASA-2019-0053

Produtos afetados

Php

Referências · 4

• https://github.com/tecnickcom/TCPDF/blob/master/CHANGELOG.TXT · Nota
• https://bugs.mageia.org/show_bug.cgi?id=23699 · Nota
• https://advisories.mageia.org/MGASA-2019-0053.html · Nota de Segurança
• https://osv.dev/vulnerability/MGASA-2019-0053 · Aviso do Fabricante