Path Traversal within joomla/archive tar class
Summary
CVE-2022-23793: Path Traversal within joomla/archive tar class. Affects joomla/archive across 2 version ranges.
< 1.1.12
>= 2.0.0, < 2.0.1
Fixed in 1.1.12 or 2.0.1, depending on the release line you run. How to fix ↓
Also tracked for
- joomla · Bitnami
The same CVE-2022-23793 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Joomla! Archive package, available on Packagist, is a library that provides functionality for working with tar archives. It is commonly used in Joomla! CMS and other Joomla! extensions. The package allows users to extract and manipulate tar files.
Vulnerability Detail
An issue has been discovered in Joomla! Archive versions 3.0.0 through 3.10.6 and 4.0.0 through 4.1.0. The vulnerability allows for path traversal when extracting a specially crafted tar package. This means that an attacker can write files outside of the intended path, potentially leading to unauthorized access, data leakage, or remote code execution.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 1.1.121.1.12composer require joomla/archive:1.1.12 -
>= 2.0.0, < 2.0.12.0.1composer require joomla/archive:2.0.1
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
There is no known workaround for this vulnerability. It is crucial to update the Joomla! Archive package to the fixed versions as soon as possible.
Conclusion
The Path Traversal vulnerability in the Joomla! Archive package can lead to unauthorized access, data leakage, or remote code execution. It is crucial to update the package to the fixed versions (1.1.12 or 2.0.1) to mitigate the risk. Use the Vulert Playground at https://vulert.com/scanner to check if your application is affected and take necessary actions to secure your system.
See every vulnerability recorded for joomla/archive →
FAQ
The vulnerability allows an attacker to write files outside of the intended path, potentially leading to unauthorized access, data leakage, or remote code execution.
You can use the Vulert Playground at Vulert Scanner to check if your application is affected by this vulnerability. Simply upload your composer.lock file and Vulert will analyze it for any open-source vulnerabilities, including this one.
Yes, versions 3.0.0 through 3.10.6 and 4.0.0 through 4.1.0 of Joomla! Archive are affected by this vulnerability.
Yes, patches have been released in versions 1.1.12 and 2.0.1 of Joomla! Archive. It is recommended to update to these versions to fix the vulnerability.
Yes, this vulnerability can be exploited remotely if an attacker can provide a specially crafted tar package for extraction.
Related vulnerabilities
Recent vulnerabilities recorded for joomla/archive.
