p PatchFirst

PatchFirst · Latest vulnerabilities

pear/pear vulnerabilities

Vulnerabilities published for pear/pear in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2017-5630

    High · CVSS 7.5EPSS 12.51%Public exploitNo fix published

    CVE-2017-5630

    PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess overwrite.

    pear/pearPHP
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →