2020-11-19 18:14:33
mitre
PUBLISHED
Archive_Tar through 1.4.10 allows an unserialization attack because phar: is blocked but PHAR: is not blocked.