HIGH CISA KEV

CVE-2020-28949

CVSS v3

7.8

HIGH

EPSS Score

93.0%

exploit probability

CISA KEV

Yes

known exploited

Exploitation

SSVC status

Description

Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.

CISA Known Exploited Vulnerability

Date Added
8/25/2022
Patch Due Date
9/15/2022
Ransomware Use
Unknown

Technical details

Published
11/19/2020

Frequently asked questions

What is CVE-2020-28949?

Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.

Is CVE-2020-28949 actively exploited?

Yes. CVE-2020-28949 is on the CISA Known Exploited Vulnerabilities (KEV) catalog, meaning it has been confirmed as actively exploited in the wild. CISA requires federal agencies to patch by 9/15/2022.

What is the CVSS score for CVE-2020-28949?

CVE-2020-28949 has a CVSS v3 base score of 7.8 (HIGH severity).

Is CVE-2020-28949 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.