In breve
- CVE-2021-32610 è una vulnerabilità ALTO (CVSS 7.1) che riguarda drupal/core, pear/archive_tar, archive tar (php).
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 73.4%, superiore al 99.5% delle vulnerabilità.
- Correzione: aggiornare a 8.9.17, 9.1.11, 9.2.2, 1.4.14 o successiva.
| Package | Affected versions | Patched versions |
|---|
| drupal/core Packagist | ≥ 8.0.0, < 8.9.17≥ 9.1.0, < 9.1.11≥ 9.2.0, < 9.2.2
| 8.9.179.1.119.2.2
|
| pear/archive_tar Packagist | < 1.4.14
| 1.4.14
|
| archive tar | < 1.4.14
| 1.4.14
|
Description
In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.
NVD description
In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free