Serious Phar Flaw Allows Arbitrary Code Execution on Drupalby CyberAvalonMay 9, 2019 Drupal, Typo3 and Joomla are all impacted by the bug. Go to Source