cbcvebase.
CVE-2021-21706
published 2021-10-04

CVE-2021-21706: In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into…

PriorityP432medium6.5CVSS 3.1
AVNACLPRNUIRSUCNIHAN
EPSS
1.34%
67.7th percentile
In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into writing a file outside target directory when extracting a ZIP file, thus potentially causing files to be created or overwritten, subject to OS permissions.

Affected

8 ranges
VendorProductVersion rangeFixed in
debianphp7.4
paloaltopan-os
phpphp>= 7.3.0 < 7.3.317.3.31
phpphp>= 7.4.0 < 7.4.247.4.24
phpphp>= 8.0.0 < 8.0.118.0.11
php_groupphp>= 7.3.x < 7.3.317.3.31
php_groupphp>= 7.4.x < 7.4.247.4.24
php_groupphp>= 8.0.X < 8.0.118.0.11

CVSS provenance

nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv6.5MEDIUM
vendor_debian5.3LOW
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.