Threats tagged 'ghsa-3phr-rx98-3qc2'

A time-of-check time-of-use (TOCTOU) vulnerability exists in olivier-ls PHP-FTS versions up to 1.1.3 affecting the TrigramIndex::open function in Storage.php. The vulnerability requires local access with write permissions to the index directory by a user other than the application user, a scenario common in shared hosting environments. Exploitation could lead to limited confidentiality, integrity, and availability impacts, with potential code execution only if the attacker can create a symlink to a web-served PHP file. Upgrading to version 1.1.4 addresses this issue.