CVE-2020-36388
In CiviCRM before 5.21.3 and 5.22.x through 5.24.x before 5.24.3, users may be able to upload and execute a crafted PHAR archive.
Published: 2021-06-17 · CVSS: Unscored
In CiviCRM before 5.21.3 and 5.22.x through 5.24.x before 5.24.3, users may be able to upload and execute a crafted PHAR archive.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7