Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PharMetaDataInterceptor in the PharStreamWrapper (aka phar-stream-wrapper) package 2.x before 2.1.1 and 3.x before 3.1.1 for TYPO3 mishandles Phar stub parsing, which allows attackers to bypass a deserialization protection mechanism.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TYPO3 PharStreamWrapper包代码问题漏洞
Vulnerability Description
TYPO3 PharStreamWrapper是瑞士TYPO3协会的一款用于流处理的拦截器。 TYPO3 PharStreamWrapper包2.1.1之前的2.x版本和3.1.1之前的3.x版本中的‘PharMetaDataInterceptor’函数存在代码问题漏洞。该漏洞源于网络系统或产品的代码开发过程中存在设计或实现不当的问题。
CVSS Information
N/A
Vulnerability Type
N/A