Grav CMS — Improper Handling of Highly Compressed Data in Installer::unZip()

Summary An authenticated admin.super user can crash Grav or fill the disk by uploading a specially crafted ZIP archive through the Direct Install tool. The method Installer::unZip calls ZipArchive::extractTo without any limit on uncompressed size, entry count, or directory depth, enabling Zip Bom...