En resumen
- CVE-2021-32610 es una vulnerabilidad ALTO (CVSS 7.1) que afecta a drupal/core, pear/archive_tar, archive tar (php).
- Probabilidad de explotación en los próximos 30 días (EPSS): 73.4%, mayor que el 99.5% de las vulnerabilidades.
- Solución: actualizar a 8.9.17, 9.1.11, 9.2.2, 1.4.14 o posterior.
| Package | Affected versions | Patched versions |
|---|
| drupal/core Packagist | ≥ 8.0.0, < 8.9.17≥ 9.1.0, < 9.1.11≥ 9.2.0, < 9.2.2
| 8.9.179.1.119.2.2
|
| pear/archive_tar Packagist | < 1.4.14
| 1.4.14
|
| archive tar | < 1.4.14
| 1.4.14
|
Description
In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.
NVD description
In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free