{"cvss":0.0,"datePublished":"2022-08-25T00:00:00Z","dateUpdated":"2022-08-25T00:00:00Z","description":"PEAR Archive_Tar allows an unserialization attack because phar: is blocked but PHAR: is not blocked. PEAR stands for PHP Extension and Application Repository and it is an open-source framework and distribution system for reusable PHP components with known usage in third-party products such as Drupal Core and Red Hat Linux.","dueDate":"2022-09-15T00:00:00Z","id":"CVE-2020-28949","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Known","product":"Archive_Tar","requiredAction":"Apply updates per vendor instructions.","severity":"CRITICAL","source":"vulncheck_kev","title":"PEAR Archive_Tar Deserialization of Untrusted Data Vulnerability","vendor":"PEAR"}