CVE-2022-23793
1 advisory.
Packagist/joomla/archive CVE-2022-23793: high 7.5, EPSS 2.08%
Path Traversal within joomla/archive tar class
Action: Upgrade joomla/archive to 1.1.12 or later.
composer require joomla/archive:1.1.12composer require joomla/archive:2.0.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.12 | - |
| 2.0.0 | 2.0.1 | - |
Fixed versions
| 1.1.12 | 2.0.1 |
Sources
- osv: GHSA-jm67-jh3g-cg3f
- https://nvd.nist.gov/vuln/detail/CVE-2022-23793
- https://developer.joomla.org/security-centre/870-20220301-core-zip-slip-within-the-tar-extractor.html
- https://github.com/FriendsOfPHP/security-advisories/blob/master/joomla/archive/CVE-2022-23793.yaml
- https://github.com/joomla-framework/archive
- http://packetstormsecurity.com/files/166546/Joomla-4.1.0-Zip-Slip-File-Overwrite-Path-Traversal.html
CVE-2022-23793 · published · modified · JSON