PT-2019-20239 · Php · Php

Published 2019-01-30 · Updated 2019-01-30

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions PHP versions prior to the fixed version

Description The issue allows the unserialization of user-provided data using the phar:// wrapper. This could potentially lead to security problems.

Recommendations For PHP versions prior to the fixed version, update to a version that includes the security fix to prevent the unserialization of user-provided data. As a temporary workaround, consider restricting the use of the phar:// wrapper until a patch is available.

Related Identifiers

MGASA-2019-0053

Affected Products

Php

References · 4

• https://advisories.mageia.org/MGASA-2019-0053.html · Security Note
• https://osv.dev/vulnerability/MGASA-2019-0053 · Vendor Advisory
• https://github.com/tecnickcom/TCPDF/blob/master/CHANGELOG.TXT · Note
• https://bugs.mageia.org/show_bug.cgi?id=23699 · Note