Lucene search

K
prionPRIOn knowledge basePRION:CVE-2017-5630
HistoryFeb 01, 2017 - 11:59 p.m.

Design/Logic Flaw

2017-02-0123:59:00
PRIOn knowledge base
www.prio-n.com
2

7.4 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

87.1%

PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess overwrite.

CPENameOperatorVersion
peareq1.10.1

7.4 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

87.1%