Lucene search

CVE-2021-32803

🗓️ 03 Aug 2021 19:08:15Reported by [email protected]Type

The npm package "tar" has an arbitrary File Creation/Overwrite vulnerability via insufficient symlink protectio

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 122
OSV	node-tar vulnerability	11 Feb 202214:43	–	osv
OSV	Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning	3 Aug 202119:00	–	osv
OSV	CVE-2021-32803	3 Aug 202119:15	–	osv
OSV	CVE-2021-32804	3 Aug 202119:15	–	osv
OSV	Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization	3 Aug 202119:06	–	osv
OSV	RHSA-2021:3666 Red Hat Security Advisory: nodejs:14 security and bug fix update	21 Oct 202423:53	–	osv
OSV	RHSA-2021:3623 Red Hat Security Advisory: nodejs:12 security and bug fix update	21 Oct 202423:52	–	osv
OSV	Important: nodejs:14 security and bug fix update	27 Sep 202106:47	–	osv
OSV	Important: nodejs:12 security and bug fix update	21 Sep 202112:33	–	osv
OSV	Important: nodejs:12 security and bug fix update	21 Sep 202112:33	–	osv

Nvd

Node

tar_project tarRange<3.2.3node.js

tar_project tarRange4.0.0–4.4.15node.js

tar_project tarRange5.0.0–5.0.7node.js

tar_project tarRange6.0.0–6.1.2node.js

Node

oracle graalvmMatch20.3.3enterprise

oracle graalvmMatch21.2.0enterprise

Node

siemens sinec_infrastructure_network_servicesRange<1.0.1.1

Source	Link
npmjs	www.npmjs.com/advisories/1771
github	www.github.com/npm/node-tar/commit/9dbdeb6df8e9dbd96fa9e84341b9d74734be6c20
github	www.github.com/npm/node-tar/security/advisories/GHSA-r628-mhmh-qjhw
cert-portal	www.cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf
oracle	www.oracle.com/security-alerts/cpuoct2021.html
npmjs	www.npmjs.com/package/tar

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

03 Aug 2021 19:15Current

CVSS25.8

CVSS38.1

EPSS0.00208