Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
PHP Improper Preservation of Permissions Vulnerability - CVE-2020-7063 - Vulnerability Database
PHP

PHP Improper Preservation of Permissions Vulnerability - CVE-2020-7063

Medium
Reference: CVE-2020-7063
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-7063
Title: PHP Improper Preservation of Permissions Vulnerability
Overview:

In PHP versions 7.2.x below 7.2.28 7.3.x below 7.3.15 and 7.4.x below 7.4.3 when creating PHAR archive using PharData::buildFromIterator() function the files are added with default permissions (0666 or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is extracted.