Skip to content
OpenAdvisories

Archive

1 February 2017

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.5
    CVE-2017-5630 Public exploit EPSS 13%

    PEAR core file overwrite vulnerability

    PECL in the download utility class in the Installer in PEAR Base System v1.10.1 does not validate file types and filenames after a redirect, which allows remote HTTP servers to overwrite files via crafted responses, as demonstrated by a .htaccess overwrite.