CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.8. See the original NVD description below for full technical details.
CVE
CVE-2020-7068
Severity
MEDIUM
CVSS
4.8
EPSS
1.66%
Original NVD Description
In PHP versions 7.2.x below 7.2.33, 7.3.x below 7.3.21 and 7.4.x below 7.4.9, while processing PHAR files using phar extension, phar_parse_zipfile could be tricked into accessing freed memory, which could lead to a crash or information disclosure.
Related CVEs
Other vulnerabilities affecting the same vendor(s)