PT-2022-28265 · Packagist · Squizlabs/Php Codesniffer

Published 2022-03-26 · Updated 2022-03-26

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned.

Description The issue concerns the use of shell exec() and exec() functions, which were not properly escaping filenames and configuration settings in most cases.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-MHFV-8RC9-W38C

Affected Products

Squizlabs/Php Codesniffer

References · 4

• https://osv.dev/vulnerability/GHSA-mhfv-8rc9-w38c · Vendor Advisory
• https://github.com/squizlabs/PHP_CodeSniffer/releases/tag/2.8.1 · Note
• https://github.com/squizlabs/PHP_CodeSniffer · Note
• https://github.com/FriendsOfPHP/security-advisories/blob/master/squizlabs/php_codesniffer/2017-03-01.yaml · Note