CVE-2022-23793: [20220301] - Core - Zip Slip within the Tar extractor
First published: Tue Mar 29 2022(Updated: )
An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Extracting an specifilcy crafted tar package could write files outside of the intended path.
Credit: security@joomla.org security@joomla.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| composer/joomla/archive | <1.1.12>=2.0.0<2.0.1 | |
| Joomla Joomla\! | >=3.0.0<=3.10.6 | |
| Joomla Joomla\! | >=4.0.0<=4.1.0 | |
| composer/joomla/archive | >=2.0.0<2.0.1 | 2.0.1 |
| composer/joomla/archive | <1.1.12 | 1.1.12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://developer.joomla.org/security-centre/870-20220301-core-zip-slip-within-the-tar-extractor.html
- http://packetstormsecurity.com/files/166546/Joomla-4.1.0-Zip-Slip-File-Overwrite-Path-Traversal.html
- https://nvd.nist.gov/vuln/detail/CVE-2022-23793
- https://github.com/FriendsOfPHP/security-advisories/blob/master/joomla/archive/CVE-2022-23793.yaml
- https://github.com/advisories/GHSA-jm67-jh3g-cg3f (Advisory)
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-23793.
What is the title of the vulnerability?
The title of the vulnerability is Path Traversal within joomla/archive tar class.
What is the severity of the vulnerability?
The severity of the vulnerability is not specified.
Which software is affected by the vulnerability?
The vulnerability affects the Joomla archive package with versions 1.1.12 up to exclusive 2.0.1.
How can the vulnerability be fixed?
To fix the vulnerability, update the Joomla archive package to a version higher than 2.0.1.
- collector/friends-of-php
- collector/nvd-index
- agent/type
- collector/github-advisory-latest
- source/GitHub
- alias/GHSA-jm67-jh3g-cg3f
- alias/CVE-2022-23793
- agent/software-canonical-lookup
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/description
- collector/nvd-cve
- source/NVD
- agent/softwarecombine
- collector/github-advisory
- agent/title
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/trending
- package-manager/composer
- vendor/joomla
- canonical/joomla joomla\!
- version/joomla joomla\!/3.0.0
- version/joomla joomla\!/3.10.6
- version/joomla joomla\!/4.0.0
- version/joomla joomla\!/4.1.0