CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-36193

Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.813

EPSS Ranking 99.1%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

Proposed Action

PEAR Archive_Tar Tar.php allows write operations with directory traversal due to inadequate checking of symbolic links. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux.

Ransomware Campaign

Unknown

References

Products affected by CVE-2020-36193

Drupal » Drupal » Version: 7.0

cpe:2.3:a:drupal:drupal:7.0
Drupal » Drupal » Version: 7.1

cpe:2.3:a:drupal:drupal:7.1
Drupal » Drupal » Version: 7.10

cpe:2.3:a:drupal:drupal:7.10
Drupal » Drupal » Version: 7.11

cpe:2.3:a:drupal:drupal:7.11
Drupal » Drupal » Version: 7.12

cpe:2.3:a:drupal:drupal:7.12
Drupal » Drupal » Version: 7.13

cpe:2.3:a:drupal:drupal:7.13
Drupal » Drupal » Version: 7.14

cpe:2.3:a:drupal:drupal:7.14
Drupal » Drupal » Version: 7.15

cpe:2.3:a:drupal:drupal:7.15
Drupal » Drupal » Version: 7.16

cpe:2.3:a:drupal:drupal:7.16
Drupal » Drupal » Version: 7.17

cpe:2.3:a:drupal:drupal:7.17
Drupal » Drupal » Version: 7.18

cpe:2.3:a:drupal:drupal:7.18
Drupal » Drupal » Version: 7.19

cpe:2.3:a:drupal:drupal:7.19
Drupal » Drupal » Version: 7.2

cpe:2.3:a:drupal:drupal:7.2
Drupal » Drupal » Version: 7.20

cpe:2.3:a:drupal:drupal:7.20
Drupal » Drupal » Version: 7.21

cpe:2.3:a:drupal:drupal:7.21
Drupal » Drupal » Version: 7.22

cpe:2.3:a:drupal:drupal:7.22
Drupal » Drupal » Version: 7.23

cpe:2.3:a:drupal:drupal:7.23
Drupal » Drupal » Version: 7.24

cpe:2.3:a:drupal:drupal:7.24
Drupal » Drupal » Version: 7.25

cpe:2.3:a:drupal:drupal:7.25
Drupal » Drupal » Version: 7.26

cpe:2.3:a:drupal:drupal:7.26
Drupal » Drupal » Version: 7.27

cpe:2.3:a:drupal:drupal:7.27
Drupal » Drupal » Version: 7.28

cpe:2.3:a:drupal:drupal:7.28
Drupal » Drupal » Version: 7.29

cpe:2.3:a:drupal:drupal:7.29
Drupal » Drupal » Version: 7.3

cpe:2.3:a:drupal:drupal:7.3
Drupal » Drupal » Version: 7.30

cpe:2.3:a:drupal:drupal:7.30
Drupal » Drupal » Version: 7.31

cpe:2.3:a:drupal:drupal:7.31
Drupal » Drupal » Version: 7.32

cpe:2.3:a:drupal:drupal:7.32
Drupal » Drupal » Version: 7.33

cpe:2.3:a:drupal:drupal:7.33
Drupal » Drupal » Version: 7.34

cpe:2.3:a:drupal:drupal:7.34
Drupal » Drupal » Version: 7.35

cpe:2.3:a:drupal:drupal:7.35
Drupal » Drupal » Version: 7.36

cpe:2.3:a:drupal:drupal:7.36
Drupal » Drupal » Version: 7.37

cpe:2.3:a:drupal:drupal:7.37
Drupal » Drupal » Version: 7.38

cpe:2.3:a:drupal:drupal:7.38
Drupal » Drupal » Version: 7.39

cpe:2.3:a:drupal:drupal:7.39
Drupal » Drupal » Version: 7.4

cpe:2.3:a:drupal:drupal:7.4
Drupal » Drupal » Version: 7.40

cpe:2.3:a:drupal:drupal:7.40
Drupal » Drupal » Version: 7.41

cpe:2.3:a:drupal:drupal:7.41
Drupal » Drupal » Version: 7.42

cpe:2.3:a:drupal:drupal:7.42
Drupal » Drupal » Version: 7.43

cpe:2.3:a:drupal:drupal:7.43
Drupal » Drupal » Version: 7.44

cpe:2.3:a:drupal:drupal:7.44
Drupal » Drupal » Version: 7.5

cpe:2.3:a:drupal:drupal:7.5
Drupal » Drupal » Version: 7.50

cpe:2.3:a:drupal:drupal:7.50
Drupal » Drupal » Version: 7.51

cpe:2.3:a:drupal:drupal:7.51
Drupal » Drupal » Version: 7.52

cpe:2.3:a:drupal:drupal:7.52
Drupal » Drupal » Version: 7.53

cpe:2.3:a:drupal:drupal:7.53
Drupal » Drupal » Version: 7.54

cpe:2.3:a:drupal:drupal:7.54
Drupal » Drupal » Version: 7.55

cpe:2.3:a:drupal:drupal:7.55
Drupal » Drupal » Version: 7.56

cpe:2.3:a:drupal:drupal:7.56
Drupal » Drupal » Version: 7.57

cpe:2.3:a:drupal:drupal:7.57
Drupal » Drupal » Version: 7.58

cpe:2.3:a:drupal:drupal:7.58
Drupal » Drupal » Version: 7.59

cpe:2.3:a:drupal:drupal:7.59
Drupal » Drupal » Version: 7.6

cpe:2.3:a:drupal:drupal:7.6
Drupal » Drupal » Version: 7.60

cpe:2.3:a:drupal:drupal:7.60
Drupal » Drupal » Version: 7.61

cpe:2.3:a:drupal:drupal:7.61
Drupal » Drupal » Version: 7.62

cpe:2.3:a:drupal:drupal:7.62
Drupal » Drupal » Version: 7.63

cpe:2.3:a:drupal:drupal:7.63
Drupal » Drupal » Version: 7.64

cpe:2.3:a:drupal:drupal:7.64
Drupal » Drupal » Version: 7.65

cpe:2.3:a:drupal:drupal:7.65
Drupal » Drupal » Version: 7.66

cpe:2.3:a:drupal:drupal:7.66
Drupal » Drupal » Version: 7.67

cpe:2.3:a:drupal:drupal:7.67
Drupal » Drupal » Version: 7.68

cpe:2.3:a:drupal:drupal:7.68
Drupal » Drupal » Version: 7.69

cpe:2.3:a:drupal:drupal:7.69
Drupal » Drupal » Version: 7.7

cpe:2.3:a:drupal:drupal:7.7
Drupal » Drupal » Version: 7.70

cpe:2.3:a:drupal:drupal:7.70
Drupal » Drupal » Version: 7.71

cpe:2.3:a:drupal:drupal:7.71
Drupal » Drupal » Version: 7.72

cpe:2.3:a:drupal:drupal:7.72
Drupal » Drupal » Version: 7.73

cpe:2.3:a:drupal:drupal:7.73
Drupal » Drupal » Version: 7.74

cpe:2.3:a:drupal:drupal:7.74
Drupal » Drupal » Version: 7.75

cpe:2.3:a:drupal:drupal:7.75
Drupal » Drupal » Version: 7.76

cpe:2.3:a:drupal:drupal:7.76
Drupal » Drupal » Version: 7.77

cpe:2.3:a:drupal:drupal:7.77
Drupal » Drupal » Version: 7.8

cpe:2.3:a:drupal:drupal:7.8
Drupal » Drupal » Version: 7.9

cpe:2.3:a:drupal:drupal:7.9
Drupal » Drupal » Version: 8.9.0

cpe:2.3:a:drupal:drupal:8.9.0
Drupal » Drupal » Version: 8.9.1

cpe:2.3:a:drupal:drupal:8.9.1
Drupal » Drupal » Version: 8.9.10

cpe:2.3:a:drupal:drupal:8.9.10
Drupal » Drupal » Version: 8.9.11

cpe:2.3:a:drupal:drupal:8.9.11
Drupal » Drupal » Version: 8.9.12

cpe:2.3:a:drupal:drupal:8.9.12
Drupal » Drupal » Version: 8.9.2

cpe:2.3:a:drupal:drupal:8.9.2
Drupal » Drupal » Version: 8.9.3

cpe:2.3:a:drupal:drupal:8.9.3
Drupal » Drupal » Version: 8.9.4

cpe:2.3:a:drupal:drupal:8.9.4
Drupal » Drupal » Version: 8.9.5

cpe:2.3:a:drupal:drupal:8.9.5
Drupal » Drupal » Version: 8.9.6

cpe:2.3:a:drupal:drupal:8.9.6
Drupal » Drupal » Version: 8.9.7

cpe:2.3:a:drupal:drupal:8.9.7
Drupal » Drupal » Version: 8.9.8

cpe:2.3:a:drupal:drupal:8.9.8
Drupal » Drupal » Version: 8.9.9

cpe:2.3:a:drupal:drupal:8.9.9
Drupal » Drupal » Version: 9.0.0

cpe:2.3:a:drupal:drupal:9.0.0
Drupal » Drupal » Version: 9.0.1

cpe:2.3:a:drupal:drupal:9.0.1
Drupal » Drupal » Version: 9.0.10

cpe:2.3:a:drupal:drupal:9.0.10
Drupal » Drupal » Version: 9.0.2

cpe:2.3:a:drupal:drupal:9.0.2
Drupal » Drupal » Version: 9.0.3

cpe:2.3:a:drupal:drupal:9.0.3
Drupal » Drupal » Version: 9.0.4

cpe:2.3:a:drupal:drupal:9.0.4
Drupal » Drupal » Version: 9.0.5

cpe:2.3:a:drupal:drupal:9.0.5
Drupal » Drupal » Version: 9.0.6

cpe:2.3:a:drupal:drupal:9.0.6
Drupal » Drupal » Version: 9.0.7

cpe:2.3:a:drupal:drupal:9.0.7
Drupal » Drupal » Version: 9.0.8

cpe:2.3:a:drupal:drupal:9.0.8
Drupal » Drupal » Version: 9.0.9

cpe:2.3:a:drupal:drupal:9.0.9
Drupal » Drupal » Version: 9.1.0

cpe:2.3:a:drupal:drupal:9.1.0
Drupal » Drupal » Version: 9.1.1

cpe:2.3:a:drupal:drupal:9.1.1
Drupal » Drupal » Version: 9.1.2

cpe:2.3:a:drupal:drupal:9.1.2
Php » Archive Tar » Version: 1.3.11

cpe:2.3:a:php:archive_tar:1.3.11
Php » Archive Tar » Version: 1.3.12

cpe:2.3:a:php:archive_tar:1.3.12
Php » Archive Tar » Version: 1.3.13

cpe:2.3:a:php:archive_tar:1.3.13
Php » Archive Tar » Version: 1.3.14

cpe:2.3:a:php:archive_tar:1.3.14
Php » Archive Tar » Version: 1.3.15

cpe:2.3:a:php:archive_tar:1.3.15
Php » Archive Tar » Version: 1.3.16

cpe:2.3:a:php:archive_tar:1.3.16
Php » Archive Tar » Version: 1.4.0

cpe:2.3:a:php:archive_tar:1.4.0
Php » Archive Tar » Version: 1.4.1

cpe:2.3:a:php:archive_tar:1.4.1
Php » Archive Tar » Version: 1.4.10

cpe:2.3:a:php:archive_tar:1.4.10
Php » Archive Tar » Version: 1.4.11

cpe:2.3:a:php:archive_tar:1.4.11
Php » Archive Tar » Version: 1.4.2

cpe:2.3:a:php:archive_tar:1.4.2
Php » Archive Tar » Version: 1.4.3

cpe:2.3:a:php:archive_tar:1.4.3
Php » Archive Tar » Version: 1.4.4

cpe:2.3:a:php:archive_tar:1.4.4
Php » Archive Tar » Version: 1.4.5

cpe:2.3:a:php:archive_tar:1.4.5
Php » Archive Tar » Version: 1.4.6

cpe:2.3:a:php:archive_tar:1.4.6
Php » Archive Tar » Version: 1.4.7

cpe:2.3:a:php:archive_tar:1.4.7
Php » Archive Tar » Version: 1.4.8

cpe:2.3:a:php:archive_tar:1.4.8
Php » Archive Tar » Version: 1.4.9

cpe:2.3:a:php:archive_tar:1.4.9
Debian » Debian Linux » Version: 10.0

cpe:2.3:o:debian:debian_linux:10.0
Debian » Debian Linux » Version: 9.0

cpe:2.3:o:debian:debian_linux:9.0
Fedoraproject » Fedora » Version: 32

cpe:2.3:o:fedoraproject:fedora:32
Fedoraproject » Fedora » Version: 33

cpe:2.3:o:fedoraproject:fedora:33
Fedoraproject » Fedora » Version: 34

cpe:2.3:o:fedoraproject:fedora:34
Fedoraproject » Fedora » Version: 35

cpe:2.3:o:fedoraproject:fedora:35

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2020-36193

Products

Pricing

Contact Us