UpHeron
All vulnerabilities

Servers and applications

CVE-2020-7063

In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator() function, the files are added with default permissions (0666, or all access) even if the original files on the filesystem were with more restrictive permissions. This may result in files having more lax permissions than intended when such archive is…

Severity
Medium 5.3
Published
27 Feb 2020
Last changed
17 Jun 2026
Added to UpHeron
14 Oct 2026
Sources
NVD

Affected software

SoftwareAffected versions
PHPServers and applications · cpe:a:php:php
  • From 7.2.0 up to 7.2.27
  • From 7.3.0 up to 7.3.14
  • From 7.4.0 up to 7.4.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-7063
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-7063