CVE-2021-32610 log
| Source |
|
| Severity | Medium |
| Remote | Yes |
| Type | Directory traversal |
| Description | In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-2225 | nextcloud | 22.1.1-1 | 22.2.0-1 | Medium | Fixed | |
| AVG-2224 | drupal | 9.2.0-1 | Medium | Not affected |
| References |
|---|
https://www.drupal.org/sa-core-2021-004 https://github.com/pear/Archive_Tar/commit/b5832439b1f37331fb4f87e67fe4f61ca26bf7d4 |