| 제목 | Kiwilan php-archive 2.3.02 Kiwilan php-archive ArchiveZip.php extract Path Traversal |
|---|
| 설명 | A vulnerability has been found in Kiwilan php-archive 2.3.02, classified as high severity. This vulnerability affects the function extract of the file src/Readers/ArchiveZip.php. The manipulation of the archive entry name (returned via ArchiveItem::getRootPath(), taken unsanitized from ZipArchive::statIndex()) leads to path traversal, allowing arbitrary file write outside the intended extraction directory when a crafted archive is processed. The related function extractAll in src/Readers/ArchiveRar.php is similarly affected, as it delegates directly to the vulnerable extract() with no safe extraction path for RAR archives. The attack can be initiated by supplying a crafted ZIP/RAR archive to an application using this library's documented extract() usage pattern. |
|---|
| 원천 | ⚠️ https://gist.github.com/0xSebin/90d210e703f880d59dbde243fae3aa75 |
|---|
| 사용자 | 0xSebin (UID 35195) |
|---|
| 제출 | 2026. 09. 17. PM 08:49 (1 월 ago) |
|---|
| 모더레이션 | 2026. 10. 19. PM 04:09 (1 month later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 422348 [kiwilan php-archive 까지 2.3.02 Extraction ArchiveZip.php ArchiveZip::extract 디렉토리 순회] |
|---|
| 포인트들 | 20 |
|---|