CVE-2020-4043 Phar unserialization vulnerability in phpMussel

2020-06-1019:40:15

CWE-502

GitHub_M

www.cve.org

CVSS3

7.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N

AI Score

9.7

Confidence

High

EPSS

0.003

Percentile

71.6%

JSON

phpMussel from versions 1.0.0 and less than 1.6.0 has an unserialization vulnerability in PHP’s phar wrapper. Uploading a specially crafted file to an affected version allows arbitrary code execution (discovered, tested, and confirmed by myself), so the risk factor should be regarded as very high. Newer phpMussel versions don’t use PHP’s phar wrapper, and are therefore unaffected. This has been fixed in version 1.6.0.

CNA Affected

[
  {
    "product": "phpMussel",
    "vendor": "phpMussel",
    "versions": [
      {
        "status": "affected",
        "version": ">= 1.0.0, < 1.6.0"
      }
    ]
  }
]