CVE-2021-32610

—

CVSS 3.1

7.1 high

EPSS

73%p99

Published

Jul 30, 2021 (Jul 30, 2021)

Modified

Jun 17, 2026

Description

In Archive_Tar before 1.4.14, symlinks can refer to targets outside of the extracted archive, a different vulnerability than CVE-2020-36193.

Vendors: php debian fedoraproject
Products: archive tar, debian linux, fedora
Weakness: CWE-59
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (73.4%)

In the news0 stories

No ingested article mentions this CVE yet.