CVE-2021-26028

Packagist/joomla/archive CVE-2021-26028: medium, EPSS 1.01%

Path Traversal within joomla/archive zip class

Action: Upgrade joomla/archive to 1.1.10 or later.

composer require joomla/archive:1.1.10

Affected

Fixed versions

Sources

• osv: GHSA-vgwr-773q-7j3c
• https://nvd.nist.gov/vuln/detail/CVE-2021-26028
• https://github.com/joomla-framework/archive/commit/32c9009a1020d16bc1060c0d06339898b697cf2c
• https://developer.joomla.org/security-centre/848-20210308-core-path-traversal-within-joomla-archive-zip-class.html
• https://github.com/FriendsOfPHP/security-advisories/blob/master/joomla/archive/CVE-2021-26028.yaml

CVE-2021-26028 · published 2021-03-24T17:58:13Z · modified 2025-04-03T15:26:49.778732Z · JSON