Lucene search

Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization

🗓️ 03 Aug 2021 19:36:06Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 136 Views

Insufficient absolute path sanitization in node-tar leading to arbitrary file creation and overwrit

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 133
OSV	CVE-2021-32804	3 Aug 202119:15	–	osv
OSV	Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization	3 Aug 202119:06	–	osv
OSV	node-tar vulnerability	11 Feb 202214:43	–	osv
OSV	Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning	3 Aug 202119:00	–	osv
OSV	CVE-2021-32803	3 Aug 202119:15	–	osv
OSV	Important: nodejs:14 security and bug fix update	27 Sep 202106:47	–	osv
OSV	Important: nodejs:14 security and bug fix update	27 Sep 202106:47	–	osv
OSV	Important: nodejs:12 security and bug fix update	21 Sep 202112:33	–	osv
OSV	Important: nodejs:12 security and bug fix update	21 Sep 202112:33	–	osv
OSV	RHSA-2021:3666 Red Hat Security Advisory: nodejs:14 security and bug fix update	21 Oct 202423:53	–	osv

Vulners

Node

tar_project tarRange6.0.0–6.1.1

tar_project tarRange5.0.0–5.0.6

tar_project tarRange4.0.0–4.4.14

tar_project tarRange<3.2.2

Source	Link
github	www.github.com/npm/node-tar/security/advisories/GHSA-3jfq-g458-7qm9
github	www.github.com/npm/node-tar/commit/1f036ca23f64a547bdd6c79c1a44bc62e8115da4
npmjs	www.npmjs.com/advisories/1770
npmjs	www.npmjs.com/package/tar
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-32804
oracle	www.oracle.com/security-alerts/cpuoct2021.html
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
github	www.github.com/advisories/GHSA-3jfq-g458-7qm9

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

03 Aug 2021 19:06Current

1.3Low risk

Vulners AI Score1.3

CVSS25.8

CVSS38.1 - 8.2

EPSS0.87712

CWE-22