CVE-2021-32814CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Skytable

High · published August 3, 2021

CVSS v3.1
8.8
EPSS
2%
Percentile
81.5
In the wild
Unconfirmed
What it is

Skytable is a NoSQL database with automated snapshots and TLS. Versions prior to 0.5.1 are vulnerable to a a directory traversal attack enabling remotely connected clients to destroy and/or manipulate critical files on the host's file system. This security bug has been patched in version 0.5.1. There are no known workarounds aside from upgrading.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.02092 · 81.5th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2021-08-03T16:25Z
EPSS history
Timeline
  • 03 AUG 16:25Z
    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Skytable
    cvelistv5