原始 OSV JSON
{
"id": "GHSA-p8q8-jfcv-g2h2",
"aliases": [
"CVE-2021-32610"
],
"details": "In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.",
"summary": "Directory Traversal in Archive_Tar",
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "1.4.14"
}
]
}
],
"package": {
"name": "pear/archive_tar",
"ecosystem": "Packagist"
}
}
],
"modified": "2021-09-20T20:26:41Z",
"severity": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N"
}
],
"published": "2021-08-09T20:40:06Z",
"references": [
{
"url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32610",
"type": "ADVISORY"
},
{
"url": "https://github.com/pear/Archive_Tar/commit/7789ebb2f34f9e4adb3a4152ad0d1548930a9755",
"type": "WEB"
},
{
"url": "https://github.com/pear/Archive_Tar/commit/b5832439b1f37331fb4f87e67fe4f",
"type": "WEB"
},
{
"url": "https://github.com/pear/Archive_Tar",
"type": "PACKAGE"
},
{
"url": "https://github.com/pear/Archive_Tar/releases/tag/1.4.14",
"type": "WEB"
},
{
"url": "https://lists.debian.org/debian-lts-announce/2021/07/msg00023.html",
"type": "WEB"
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/42GPGVVFTLJYAKRI75IVB5R45NYQGEUR",
"type": "WEB"
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/CAODVMHGL5MHQWQAQTXQ7G7OE3VQZ7LS",
"type": "WEB"
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/G5LTY6COQYNMMHQJ3QIOJHEWCKD4XDFH",
"type": "WEB"
},
{
"url": "https://lists.fedoraproject.org/archives/list/[email protected]/message/VJQQYDAOWHD6RDITDRPHFW7WY6BS3V5N",
"type": "WEB"
},
{
"url": "https://www.drupal.org/sa-core-2021-004",
"type": "WEB"
}
],
"schema_version": "1.4.0",
"database_specific": {
"cwe_ids": [
"CWE-59"
],
"severity": "HIGH",
"github_reviewed": true,
"nvd_published_at": "2021-07-30T14:15:00Z",
"github_reviewed_at": "2021-08-02T18:04:45Z"
}
}