{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.10.1"}],"component":"pear/pear","cve_ids":["CVE-2017-5630"],"ecosystem":"Packagist","epss":0.12513,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-xxv8-pv43-57x5","id":"tcs_01M5KFBFY1VW8NW9Q9A9ANT7XG","modified_at":"2023-11-08T03:59:22.059808Z","published_at":"2022-05-13T01:28:45Z","references":["https://osv.dev/vulnerability/GHSA-xxv8-pv43-57x5","https://nvd.nist.gov/vuln/detail/CVE-2017-5630","https://github.com/pear/pear-core","https://vimeo.com/201341280","https://web.archive.org/web/20210123222048/https://www.securityfocus.com/bid/95882","https://www.exploit-db.com/exploits/41185","http://hyp3rlinx.altervista.org/advisories/PEAR-ARBITRARY-FILE-DOWNLOAD.txt","http://pear.php.net/bugs/bug.php?id=21171"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-xxv8-pv43-57x5","url":"https://osv.dev/vulnerability/GHSA-xxv8-pv43-57x5"}],"summary":"PEAR core file overwrite vulnerability"}