Threats tagged 'ghsa-9vw2-f4vp-x7gf'

PHPUnit versions 13.4.0 through 13.4.3 have a vulnerability in their PHPT code coverage feature where temporary test files are written to a fixed directory under the system's temporary path (e.g., /tmp/phpunit-phpt). On multi-user systems with shared temporary directories, a local attacker can pre-create this directory and replace test files to execute arbitrary code with the privileges of the PHPUnit user. This attack is stealthy as the test passes and coverage reports appear normal. The issue is fixed in PHPUnit 13.4.4 by using unpredictable directory names with restricted permissions.