Описание
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, use of preg_replace() with the /e modifier in bug update email handling can enable PHP code execution if attacker-controlled content reaches the evaluated replacement. This issue has been patched in version 1.33.0.
Ссылки
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 1.33.0 (исключая)
cpe:2.3:a:pear:pearweb:*:*:*:*:*:*:*:*
EPSS
Процентиль: 24%
0.00082
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-624
Связанные уязвимости
CVSS3: 9.8
ubuntu
4 дня назад
PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, use of preg_replace() with the /e modifier in bug update email handling can enable PHP code execution if attacker-controlled content reaches the evaluated replacement. This issue has been patched in version 1.33.0.
CVSS3: 9.8
debian
4 дня назад
PEAR is a framework and distribution system for reusable PHP component ...
EPSS
Процентиль: 24%
0.00082
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-624