CVE-2021-21706
Published on: 10/04/2021 12:00:00 AM UTC
Last Modified on: 11/03/2021 08:24:00 PM UTC
Certain versions of Windows from Microsoft contain the following vulnerability:
In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Windows environment, ZipArchive::extractTo may be tricked into writing a file outside target directory when extracting a ZIP file, thus potentially causing files to be created or overwritten, subject to OS permissions.
- CVE-2021-21706 has been assigned by
[email protected] to track the vulnerability - currently rated as MEDIUM severity. - Affected Vendor/Software: PHP Group - PHP version < 7.3.31
- Affected Vendor/Software: PHP Group - PHP version < 7.4.24
- Affected Vendor/Software: PHP Group - PHP version < 8.0.11
CVSS3 Score: 6.5 - MEDIUM
| Attack Vector ⓘ |
Attack Complexity |
Privileges Required |
User Interaction |
|---|---|---|---|
| NETWORK | LOW | NONE | REQUIRED |
| Scope | Confidentiality Impact |
Integrity Impact |
Availability Impact |
| UNCHANGED | NONE | HIGH | NONE |
CVSS2 Score: 4.3 - MEDIUM
| Access Vector ⓘ |
Access Complexity |
Authentication |
|---|---|---|
| NETWORK | MEDIUM | NONE |
| Confidentiality Impact |
Integrity Impact |
Availability Impact |
| NONE | PARTIAL | NONE |
CVE References
| Description | Tags ⓘ | Link |
|---|---|---|
| CVE-2021-21706 PHP Vulnerability in NetApp Products | NetApp Product Security | security.netapp.com text/html |
CONFIRM security.netapp.com/advisory/ntap-20211029-0007/ |
| PHP :: Sec Bug #81420 :: ZipArchive::extractTo may extract outside of destination dir | bugs.php.net text/html |
MISC bugs.php.net/bug.php?id=81420 |
Related QID Numbers
- 150475 PHP Path Traversal Vulnerability (CVE-2021-21706)
- 38851 Hypertext Preprocessor (PHP) Security Update
- 501144 Alpine Linux Security Update for php7
- 501663 Alpine Linux Security Update for php7
- 501666 Alpine Linux Security Update for php8
- 502331 Alpine Linux Security Update for php81
- 752898 SUSE Enterprise Linux Security Update for php7 (SUSE-SU-2022:4069-1)
- 752901 SUSE Enterprise Linux Security Update for php74 (SUSE-SU-2022:4068-1)
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Microsoft | Windows | - | All | All | All |
| Application | Php | Php | All | All | All | All |
- cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*:
- cpe:2.3:a:php:php:*:*:*:*:*:*:*:*:
Discovery Credit
reported by vi at hackberry dot xyz
Social Mentions
| Source | Title | Posted (UTC) |
|---|---|---|
 @CVEreport |
CVE-2021-21706 : In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft… twitter.com/i/web/status/1… | 2021-10-04 04:04:43 |
| @WesUncensored |
New vulnerability on the NVD: CVE-2021-21706 ift.tt/3ovyaP5 | 2021-10-04 05:33:57 |
| @workentin |
New vulnerability on the NVD: CVE-2021-21706 ift.tt/3ovyaP5 | 2021-10-04 05:40:47 |
| @xanadulinux |
CVE-2021-21706 ift.tt/3ovyaP5 | 2021-10-04 05:52:06 |
| @LinInfoSec |
Php - CVE-2021-21706: bugs.php.net/bug.php?id=814… | 2021-10-04 06:16:57 |
| @SecRiskRptSME |
RT: CVE-2021-21706 In PHP versions 7.3.x below 7.3.31, 7.4.x below 7.4.24 and 8.0.x below 8.0.11, in Microsoft Win… twitter.com/i/web/status/1… | 2021-10-04 07:33:35 |
| @omokazuki |
SIOSセキュリティブログを更新しました。 PHPの脆弱性情報(CVE-2021-21706) #sios_tech #security #vulnerability #セキュリティ #脆弱性 #php security.sios.com/vulnerability/… | 2021-10-04 22:43:34 |