[MEDIUM] Directory Traversal on ZIP extraction

PKSA-187n-yk48-q1fv CVE-2019-19848 GHSA-77p4-wfr8-977w

Affected package: typo3/cms

Affected version: >=10.0.0,<10.2.1|>=8.0.0,<8.7.30|>=9.0.0,<9.5.12

Reported by:
GitHub, FriendsOfPHP/security-advisories