CVE-2021-21706 PUBLISHED

ZipArchive::extractTo may extract outside of destination dir

EPSS 0.53% · 67.0th percentile

Risk Scores

EPSS Score
0.53%
67.0th percentile

Affected Products

VendorProductVersions
Bitnamiphp-min7.3.0, 8.0.0, 7.4.0
Bitnamiphp7.3.0, 8.0.0, 7.4.0
Bitnamilibphp7.4.0, 7.3.0, 8.0.0
Bitnamilibphp7.3.0, 7.4.0, 8.0.0
Bitnamiphp7.3.0, 8.0.0, 7.4.0
Bitnamiphp-min7.4.0, 8.0.0, 7.3.0

Timeline

References

Open in Interactive Console →