CVE-2021-26028
[20210308] - Core - Path Traversal within joomla/archive zip class
Résumé
[20210308] - Core - Path Traversal within joomla/archive zip class
Description d'origine
La description telle que publiée par la source (souvent en anglais).
An issue was discovered in Joomla! 3.0.0 through 3.9.24. Extracting an specifilcy crafted zip package could write files outside of the intended path.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Bitnami
joomla
[{"type":"SEMVER","events":[{"introduced":"3.0.0"},{"fixed":"3.9.25"}]}]
Références
- advisory developer.joomla.org
- web nvd.nist.gov