| Title | Kiwilan php-archive 2.3.02 Kiwilan php-archive ArchiveZip.php extract Path Traversal |
|---|
| Description | A vulnerability has been found in Kiwilan php-archive 2.3.02, classified as high severity. This vulnerability affects the function extract of the file src/Readers/ArchiveZip.php. The manipulation of the archive entry name (returned via ArchiveItem::getRootPath(), taken unsanitized from ZipArchive::statIndex()) leads to path traversal, allowing arbitrary file write outside the intended extraction directory when a crafted archive is processed. The related function extractAll in src/Readers/ArchiveRar.php is similarly affected, as it delegates directly to the vulnerable extract() with no safe extraction path for RAR archives. The attack can be initiated by supplying a crafted ZIP/RAR archive to an application using this library's documented extract() usage pattern. |
|---|
| Source | ⚠️ https://gist.github.com/0xSebin/90d210e703f880d59dbde243fae3aa75 |
|---|
| User | 0xSebin (UID 35195) |
|---|
| Submission | 09/17/2026 20:49 (1 month ago) |
|---|
| Moderation | 10/19/2026 16:09 (1 month later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 422348 [kiwilan php-archive up to 2.3.02 Extraction ArchiveZip.php ArchiveZip::extract path traversal] |
|---|
| Points | 20 |
|---|