In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into writing a file outside target directory when extracting a ZIP file, thus potentially causing files to be created or overwritten, subject to OS permissions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade php81Upgrade php8Upgrade php7 | Aug 22, 2024 | Oct 4, 2021 |
| Php | — | Upgrade to PHP version 8.0.10Upgrade to PHP version 7.3.30Upgrade to PHP version 7.4.23 | Nov 30, 2021 | Oct 4, 2021 |
| Suse | — | Upgrade php74-sqliteUpgrade php74-bcmathUpgrade php74-pdoUpgrade php74-mysqlUpgrade php7-opensslUpgrade php74-posixUpgrade php74Upgrade php74-pharUpgrade php74-intlUpgrade php74-xmlwriterUpgrade php74-ctypeUpgrade php7-sysvmsgUpgrade php7-mbstringUpgrade php74-fastcgiUpgrade php74-xmlreaderUpgrade php7-sqliteUpgrade php7-gettextUpgrade php7-shmopUpgrade php74-dbaUpgrade php7-dbaUpgrade php7-fpmUpgrade php74-ldapUpgrade php7-ldapUpgrade php74-domUpgrade php7-domUpgrade php7-odbcUpgrade php74-odbcUpgrade php7-cliUpgrade apache2-mod_php74Upgrade php7-zlibUpgrade php7-jsonUpgrade php7-pharUpgrade php7-bcmathUpgrade php74-tidyUpgrade php74-opensslUpgrade php7-tokenizerUpgrade php74-fileinfoUpgrade php74-mbstringUpgrade php7Upgrade php7-fileinfoUpgrade php7-readlineUpgrade php7-sysvshmUpgrade php74-ftpUpgrade php74-sysvsemUpgrade php7-develUpgrade php74-iconvUpgrade apache2-mod_php7Upgrade php7-bz2Upgrade php7-xmlrpcUpgrade php74-readlineUpgrade php74-zlibUpgrade php7-calendarUpgrade php74-tokenizerUpgrade php7-sodiumUpgrade php74-jsonUpgrade php7-ftpUpgrade php7-zipUpgrade php7-pdoUpgrade php7-firebirdUpgrade php7-pcntlUpgrade php74-sysvmsgUpgrade php7-pgsqlUpgrade php7-socketsUpgrade php7-testUpgrade php7-xslUpgrade php74-pgsqlUpgrade php74-pcntlUpgrade php7-gmpUpgrade php74-sodiumUpgrade php7-opcacheUpgrade php7-embedUpgrade php7-tidyUpgrade php7-soapUpgrade php7-xmlwriterUpgrade php74-socketsUpgrade php74-exifUpgrade php74-gdUpgrade php74-bz2Upgrade php7-mysqlUpgrade php7-sysvsemUpgrade php74-opcacheUpgrade php7-enchantUpgrade php74-develUpgrade php74-soapUpgrade php7-exifUpgrade php7-gdUpgrade php7-intlUpgrade php7-snmpUpgrade php74-enchantUpgrade php74-calendarUpgrade php7-iconvUpgrade php7-xmlreaderUpgrade php74-xslUpgrade php7-curlUpgrade php74-zipUpgrade php7-fastcgiUpgrade php7-ctypeUpgrade php74-xmlrpcUpgrade php74-fpmUpgrade php74-snmpUpgrade php74-sysvshmUpgrade php74-curlUpgrade php7-posixUpgrade php74-gettextUpgrade php74-shmopUpgrade php74-gmp | Oct 26, 2022 | Oct 4, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub