Vulnerabilities > Drupal > Drupal > 8.9.7
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2020-11-19 | CVE-2020-28948 | Deserialization of Untrusted Data vulnerability in multiple products Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked. | 7.8 |