Skip to content
Threat Feed
Subscribe

Product

PHPCSUtils (>= 1.0.0-Alpha1, < 1.2.3)

1 brief RSS
high advisory

PHPCSUtils Arbitrary Code Execution via AbstractArrayDeclarationSniff

PHPCSUtils versions 1.0.0-alpha1 through 1.2.2 are vulnerable to remote code execution due to insecure use of eval() within the AbstractArrayDeclarationSniff::getActualArrayKey() method.

PHPCSUtils remote-code-execution static-analysis supply-chain
1t