PEAR is a framework and distribution system for reusable PHP components. Prior to version 1.33.0, logic bug in the roadmap role check allows non-lead maintainers to create, update, or delete roadmaps. This issue has been patched in version 1.33.0.
Weakness
The product uses an expression in which operator precedence causes incorrect logic to be used.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pearweb | Pear | * | 1.33.0 (excluding) |