Description
An issue was discovered in Joomla! 3.0.0 through 3.9.24. Extracting an specifilcy crafted zip package could write files outside of the intended path.
Remediation
References
Related Vulnerabilities
Varnish Cache Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0345)
WordPress Plugin DZS Video Gallery Information Disclosure (3.1.3)
ownCloud CVE-2013-7344 Vulnerability (CVE-2013-7344)
WordPress Plugin Blog2Social:Social Media Auto Post & Scheduler Cross-Site Scripting (5.0.2)
WordPress Plugin Advanced Order Export For WooCommerce CSV Injection (1.5.4)