Ez Platform and Legacy are prone to an insecure interpretation of PHP/PHAR uploads

🗓️ 15 May 2024 21:31:07Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 11 Views

Ez Platform and Legacy security: Insecure PHP/PHAR upload

Vulners

Node

ezsystems ezpublish-legacyRange5.3.0–5.3.12.6composer

ezsystems ezpublish-legacyRange5.4.0–5.4.12.3composer

ezsystems ezpublish-legacyRange2011.0.0–2017.12.4.3composer

ezsystems ezpublish-legacyRange2018.6.0–2018.6.1.4composer

ezsystems ezpublish-legacyRange2018.9.0–2018.9.1.3composer

Source	Link
github	www.github.com/ezsystems/ezplatform/commit/9a0c52dc4535e4b3ce379f80222dc53f705a2cfd
github	www.github.com/ezsystems/ezpublish-legacy/commit/d21957bf202b091ab39dfb5be300f6c30be3933e
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/ezsystems/ezpublish-legacy/2018-11-21-1.yaml
web	www.web.archive.org/web/20210614192208/https://share.ez.no/community-project/security-advisories/ezsa-2018-009-do-not-interpret-php-phar-uploads
share	www.share.ez.no/community-project/security-advisories/ezsa-2018-009-do-not-interpret-php-phar-uploads
github	www.github.com/advisories/GHSA-pqjm-xcp8-wgmm

15 May 2024 21:31Current

7.5High risk

Vulners AI Score7.5