Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 9 | drupal7 | 7.52-2+deb9u9 |
Vulnerabilities 1
-
Critical 9.8
Directory Traversal in typo3/phar-stream-wrapper
The PharStreamWrapper (aka phar-stream-wrapper) package 2.x before 2.1.1 and 3.x before 3.1.1 for TYPO3 does not prevent directory traversal, which allows attackers to bypass a deserialization protection mechanism, as demonstrated by a phar:///path/bad.phar/.…