CVE-2021-32610

In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193

published July 27, 2021

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.

CVSS
—
EPSS
73%
Percentile
99.5
In the wild
Unconfirmed
What it is

In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.73377 · 99.5th percentile
Published
2021-07-27T05:21Z
EPSS history
Timeline
  • 27 JUL 05:21Z
    In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193
    cvelistv5