Lucene search

CVE-2020-7063

🗓️ 27 Feb 2020 21:19:15Reported by phpType

cve🔗 web.nvd.nist.gov👁 464 Views🌐 8 Media mentions

PHP versions 7.2.x, 7.3.x, 7.4.x vulnerability in PHAR archive creatio

Reporter	Title	Published	Views	Family All 99
NVD	CVE-2020-7063	27 Feb 202021:15	–	nvd
UbuntuCve	CVE-2020-7063	27 Feb 202000:00	–	ubuntucve
Prion	Design/Logic Flaw	27 Feb 202021:15	–	prion
Veracode	Insecure File Permissions	6 Aug 202021:35	–	veracode
F5 Networks	K31263502 : PHP vulnerability CVE-2020-7063	3 Mar 202000:00	–	f5
OSV	BIT-php-2020-7063	6 Mar 202411:07	–	osv
OSV	php5 - security update	26 Mar 202000:00	–	osv
OSV	php7.0 - security update	5 Jul 202000:00	–	osv
OSV	php7.3 - security update	6 Jul 202000:00	–	osv
OSV	Red Hat Security Advisory: rh-php73-php security, bug fix, and enhancement update	13 Sep 202422:43	–	osv

Nvd

Node

php phpRange7.2.0–7.2.27

php phpRange7.3.0–7.3.14

php phpRange7.4.0–7.4.2

Node

tenable tenable.scRange<5.19.0

Node

debian debian_linuxMatch8.0

debian debian_linuxMatch9.0

debian debian_linuxMatch10.0

Node

opensuse leapMatch15.1

[
  {
    "product": "PHP",
    "vendor": "PHP Group",
    "versions": [
      {
        "lessThan": "7.3.15",
        "status": "affected",
        "version": "7.3.x",
        "versionType": "custom"
      },
      {
        "lessThan": "7.4.3",
        "status": "affected",
        "version": "7.4.x",
        "versionType": "custom"
      },
      {
        "lessThan": "7.2.28",
        "status": "affected",
        "version": "7.2.x",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tenable	www.tenable.com/security/tns-2021-14
lists	www.lists.opensuse.org/opensuse-security-announce/2020-03/msg00023.html
debian	www.debian.org/security/2020/dsa-4719
debian	www.debian.org/security/2020/dsa-4717
usn	www.usn.ubuntu.com/4330-1/
lists	www.lists.debian.org/debian-lts-announce/2020/03/msg00034.html
bugs	www.bugs.php.net/bug.php
security	www.security.gentoo.org/glsa/202003-57

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Feb 2020 21:15Current

7.0High risk

Vulners AI Score7.0

CVSS25.0

CVSS35.5

EPSS0.006

CWE-281