CVE-2021-26028
[20210308] - Core - Path Traversal within joomla/archive zip class
概要
[20210308] - Core - Path Traversal within joomla/archive zip class
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
An issue was discovered in Joomla! 3.0.0 through 3.9.24. Extracting an specifilcy crafted zip package could write files outside of the intended path.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Bitnami
joomla
[{"type":"SEMVER","events":[{"introduced":"3.0.0"},{"fixed":"3.9.25"}]}]
参照URL
- advisory developer.joomla.org
- web nvd.nist.gov