Em resumo
- CVE-2021-32610 é uma vulnerabilidade ALTO (CVSS 7.1) que afeta drupal/core, pear/archive_tar, archive tar (php).
- Chance de exploração nos próximos 30 dias (EPSS): 73.4%, maior que 99.5% das vulnerabilidades.
- Correção: atualize para 8.9.17, 9.1.11, 9.2.2, 1.4.14 ou posterior.
| Package | Affected versions | Patched versions |
|---|
| drupal/core Packagist | ≥ 8.0.0, < 8.9.17≥ 9.1.0, < 9.1.11≥ 9.2.0, < 9.2.2
| 8.9.179.1.119.2.2
|
| pear/archive_tar Packagist | < 1.4.14
| 1.4.14
|
| archive tar | < 1.4.14
| 1.4.14
|
Description
In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.
NVD description
In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free