CVE-2022-23793

[20220301] - Core - Zip Slip within the Tar extractor

published March 30, 2022

CVSS
—
EPSS
2%
Percentile
81.3
In the wild
Unconfirmed
What it is

An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Extracting an specifilcy crafted tar package could write files outside of the intended path.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02078 · 81.3th percentile
Published
2022-03-30T15:20Z
EPSS history
Timeline
  • 30 MAR 15:20Z
    [20220301] - Core - Zip Slip within the Tar extractor
    cvelistv5