CVE-2022-23793
Fixed upstream EPSS 2%
An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Extracting an specifilcy crafted tar package could write files outside of the intended path.
Products: Joomla! Project Joomla! CMS, Joomla! Project joomla/archive
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Packagist | joomla/archive | 1.1.12 |
| Packagist | joomla/archive | 2.0.1 |