[MEDIUM] Directory Traversal on ZIP extraction

PKSA-jydd-ptqz-cc3y CVE-2019-19848 GHSA-77p4-wfr8-977w

Affected package: typo3/cms-core

Affected version: >=10.0.0,<10.2.1|>=8.0.0,<8.7.30|>=9.0.0,<9.5.12

Reported by:
GitHub, FriendsOfPHP/security-advisories