onyx --cves cve-2020-7068
CVE-2020-7068
- score
- <0.1
- cvss
- 4.8
- epss
- 1.7%
- published
- 2020-09-09
- kev added
- —
- first seen
PHP 7.2.x < 7.2.33, 7.3.x < 7.3.21, and 7.4.x < 7.4.9 contain a use-after-free vulnerability in phar extension's phar_parse_zipfile, letting attackers cause crashes or disclose information, exploit requires processing malicious PHAR files.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
- Public PoC
Exploit availability
Public PoC flagged by vulnx; no direct exploit link among the citations.