Package · Packagist

joomla/archive

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

High 7.5

CVE-2022-23793

[20220301] - Core - Zip Slip within the Tar extractor

An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Extracting an specifilcy crafted tar package could write files outside of the intended path.

Joomla! Project Joomla! CMS joomla/archive joomla/archive Web / CMS Packagist

Mar 30, 2022
Medium —

CVE-2021-26028

[20210308] - Core - Path Traversal within joomla/archive zip class

An issue was discovered in Joomla! 3.0.0 through 3.9.24. Extracting an specifilcy crafted zip package could write files outside of the intended path.

Joomla! Project Joomla! CMS joomla/archive Web / CMS Packagist

Mar 4, 2021