Executive brief
Deserialization of Untrusted Data in Archive_Tar
Affected products
- Packagist pear/archive_tar
- Packagist drupal/core
CVE identifiers
- CVE-2020-28948
- CVE-2020-28949
Junglewise Threat Intelligence
CVE-2020-28948: Deserialization of Untrusted Data in Archive_Tar
CVE-2020-28948 · Severity: low · CVSS 3.1 · Published 2021-04-22
Technologies: pear/archive_tar (Packagist), drupal/core (Packagist). Vendors: Packagist.