PT-2021-5346 · Php+2 · Php+2

Cmb

·

Published

2021-09-06

·

Updated

2025-08-11

·

CVE-2021-21706

CVSS v2.0

7.1

High

VectorAV:N/AC:M/Au:N/C:N/I:C/A:N
Name of the Vulnerable Software and Affected Versions PHP versions 7.3.x through 7.3.30 PHP versions 7.4.x through 7.4.23 PHP versions 8.0.x through 8.0.10
Description The issue arises from the incorrect restriction of the path name to a directory with limited access in the ZipArchive::extractTo function of the PHP interpreter. This can be exploited by a remote attacker to create or overwrite files, subject to OS permissions. The vulnerability exists in the PHP interpreter when extracting a ZIP file, potentially allowing files to be created or overwritten outside the target directory.
Recommendations For PHP versions 7.3.x through 7.3.30, update to version 7.3.31 or later. For PHP versions 7.4.x through 7.4.23, update to version 7.4.24 or later. For PHP versions 8.0.x through 8.0.10, update to version 8.0.11 or later.

Fix

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2021-2876
ALT-PU-2021-2887
ALT-PU-2021-2937
ALT-PU-2021-2943
ALT-PU-2021-2971
ALT-PU-2021-3079
ALT-PU-2021-3645
BDU:2021-06176
BIT-LIBPHP-2021-21706
BIT-PHP-2021-21706
BIT-PHP-MIN-2021-21706
CVE-2021-21706
OPENSUSE-SU-2022_4069-1
OPENSUSE-SU-2024:11167-1
OPENSUSE-SU-2024:11169-1
SUSE-SU-2022:4068-1
SUSE-SU-2022:4069-1

Affected Products

Alt Linux
Php
Suse