{"action":"Upgrade joomla/archive to 1.1.12 or later.","affected":[{"fixed":"1.1.12","introduced":"0"},{"fixed":"2.0.1","introduced":"2.0.0"}],"component":"joomla/archive","cve_ids":["CVE-2022-23793"],"ecosystem":"Packagist","epss":0.02078,"exploited":false,"fixed_versions":["1.1.12","2.0.1"],"ghsa_id":"GHSA-jm67-jh3g-cg3f","id":"tcs_01M5KF4PP94VNWKDA54VMX25WQ","modified_at":"2025-04-03T15:26:51.299801Z","published_at":"2022-03-31T00:00:16Z","references":["https://osv.dev/vulnerability/GHSA-jm67-jh3g-cg3f","https://nvd.nist.gov/vuln/detail/CVE-2022-23793","https://developer.joomla.org/security-centre/870-20220301-core-zip-slip-within-the-tar-extractor.html","https://github.com/FriendsOfPHP/security-advisories/blob/master/joomla/archive/CVE-2022-23793.yaml","https://github.com/joomla-framework/archive","http://packetstormsecurity.com/files/166546/Joomla-4.1.0-Zip-Slip-File-Overwrite-Path-Traversal.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-jm67-jh3g-cg3f","url":"https://osv.dev/vulnerability/GHSA-jm67-jh3g-cg3f"}],"summary":"Path Traversal within joomla/archive tar class"}