CVE-2022-23793: Path Traversal within joomla/archive tar class

The vulnerability stems from improper path sanitization during tar extraction. The Tar::extract method is responsible for handling archive entries, and the advisory explicitly mentions the tar extractor as the vulnerable component. Path traversal occurs when processing malicious filenames without normalization checks, a common failure pattern in CWE-22 scenarios. The high confidence comes from the direct match between the vulnerability description and the core responsibility of the extract method in tar handling.