title: [20220301] - Core - Zip Slip within the Tar extractor
description: An issue was discovered in Joomla! 3.0.0 through 3.10.6 & 4.0.0 through 4.1.0. Extracting an specifilcy crafted tar package could write files outside of the intended path.
problem types: Path Traversal
affected:
{
product: Joomla! CMS
vendor: Joomla! Project
versions:
status: affected, version: 3.0.0-3.10.6 & 4.0.0-4.1.0
}
{
product: joomla/archive
vendor: Joomla! Project
versions:
status: affected, version: 1.0.0-1.1.11 & 2.0.0
}
