CVE-2021-26028
[20210308] - Core - Path Traversal within joomla/archive zip class
Summary
[20210308] - Core - Path Traversal within joomla/archive zip class
Original description
The description as published by the source.
An issue was discovered in Joomla! 3.0.0 through 3.9.24. Extracting an specifilcy crafted zip package could write files outside of the intended path.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Bitnami
joomla
[{"type":"SEMVER","events":[{"introduced":"3.0.0"},{"fixed":"3.9.25"}]}]
References
- advisory developer.joomla.org
- web nvd.nist.gov