CVE-2021-38621

CVE-2021-38621 affects the Netless Agora Flat Server, specifically the remove API in v1/controller/cloudStorage/alibabaCloud/remove/index.ts. The vulnerability arises from mishandling file ownership in that endpoint, as reported across several sources (NVD, Red Hat, OSV, CVE listing). The entry i...