CVE-2020-28949
KEVHIGH 7.8EPSS 84.6%
Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.
- CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS v3.1
- 7.8 HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:H - CVSS v2.0
- 6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P - EPSS
- 84.55% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2022-08-25
- Published
- 2020-11-19
- Updated
- 2025-10-21
Proof-of-concept exploits (4)
- http://packetstormsecurity.com/files/161095/PEAR-Archive_Tar-Arbitrary-File-Write.html
- pear/Archive_Tar/issues/33
- 0x240x23elu/CVE-2020-28948-and-CVE-2020-289496★ · 2020-11-27
- JinHao-L/PoC-for-CVE-2020-28948-CVE-2020-289490★ · 2022-10-17