Composer InstalledVersions Code Execution

The vulnerability of the InstalledVersions.php and install.php scripts of the PHP Composer dependency manager is related to the inclusion of functions from an unverified controlled area. Exploiting this vulnerability could allow a attacker to execute arbitrary code and increase their privileges...