Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-7068
HistorySep 09, 2020 - 6:15 p.m.

Information disclosure

2020-09-0918:15:00
PRIOn knowledge base
www.prio-n.com
11

3.8 Low

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.1%

In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.