The vulnerability of the InstalledVersions.php and install.php scripts of the PHP Composer dependency manager allows a hacker to execute arbitrary code and gain elevated privileges.

The vulnerability of the InstalledVersions.php and install.php scripts of the PHP Composer dependency manager is related to the inclusion of functions from an unverified controlled area. Exploiting this vulnerability could allow a attacker to execute arbitrary code and increase their privileges...