Add CVE-2018-1000888 in pear/archive_tar

FriendsOfPHP · Jan 14, 2019 · b183e39 · b183e39
1 parent a4bd7cd
commit b183e39
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/pear/archive_tar/CVE-2018-1000888.yaml b/pear/archive_tar/CVE-2018-1000888.yaml
@@ -0,0 +1,8 @@
+title: Potential RCE if filename starts with phar://
+link: https://pear.php.net/bugs/bug.php?id=23782
+cve: CVE-2018-1000888
+branches:
+    1.x:
+        time: 2018-12-20 19:11:37
+        versions: ['<1.4.4']
+reference: composer://pear/archive_tar