PT-2022-28179 · Packagist · Squizlabs/Php Codesniffer

Published 2022-03-26 · Updated 2022-03-26

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description.

Description The issue allows for arbitrary code execution when using a properly crafted filename with the --filter=gitmodified command line option.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-3988-H75V-HWF6

Affected Products

Squizlabs/Php Codesniffer

References · 4

• https://osv.dev/vulnerability/GHSA-3988-h75v-hwf6 · Vendor Advisory
• https://github.com/squizlabs/PHP_CodeSniffer/releases/tag/3.0.1 · Note
• https://github.com/squizlabs/PHP_CodeSniffer · Note
• https://github.com/FriendsOfPHP/security-advisories/blob/master/squizlabs/php_codesniffer/2017-05-18.yaml · Note