PT-2021-5346 · Php+2 · Php+2
Cmb
·
Published
2021-09-06
·
Updated
2025-08-11
·
CVE-2021-21706
CVSS v2.0
7.1
High
| Vector | AV:N/AC:M/Au:N/C:N/I:C/A:N |
Name of the Vulnerable Software and Affected Versions
PHP versions 7.3.x through 7.3.30
PHP versions 7.4.x through 7.4.23
PHP versions 8.0.x through 8.0.10
Description
The issue arises from the incorrect restriction of the path name to a directory with limited access in the ZipArchive::extractTo function of the PHP interpreter. This can be exploited by a remote attacker to create or overwrite files, subject to OS permissions. The vulnerability exists in the PHP interpreter when extracting a ZIP file, potentially allowing files to be created or overwritten outside the target directory.
Recommendations
For PHP versions 7.3.x through 7.3.30, update to version 7.3.31 or later.
For PHP versions 7.4.x through 7.4.23, update to version 7.4.24 or later.
For PHP versions 8.0.x through 8.0.10, update to version 8.0.11 or later.
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Php
Suse