deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-36156
Published: 2021-08-03
Description: An issue was discovered in Grafana Loki through 2.2.1. The header value X-Scope-OrgID is used to construct file paths for rules files, and if crafted to conduct directory traversal such as ae ../../sensitive/path/in/deployment pathname, then Loki will attempt to parse a rules file at that location and include some of the contents in the error message.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/grafana/loki/pull/4020#issue-694377133; https://github.com/grafana/loki/releases/tag/v2.3.0; https://github.com/grafana/loki/pull/4020#issue-694377133
CVE: CVE-2021-36157
Published: 2021-08-03
Description: An issue was discovered in Grafana Cortex through 1.9.0. The header value X-Scope-OrgID is used to construct file paths for rules files, and if crafted to conduct directory traversal such as ae ../../sensitive/path/in/deployment pathname, then Cortex will attempt to parse a rules file at that location and include some of the contents in the error message. (Other Cortex API requests can also be sent a malicious OrgID header, e.g., tricking the ingester into writing metrics to a different location, but the effect is nuisance rather than information disclosure.)
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/cortexproject/cortex/pull/4375; https://grafana.com/docs/grafana/latest/release-notes/; https://github.com/cortexproject/cortex/pull/4375
CVE: CVE-2021-21576
Published: 2021-08-03
Description: Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to following a specially crafted link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.dell.com/support/kbdoc/000189193; https://www.dell.com/support/kbdoc/000189193
CVE: CVE-2021-21577
Published: 2021-08-03
Description: Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to following a specially crafted link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.dell.com/support/kbdoc/000189193; https://www.dell.com/support/kbdoc/000189193
CVE: CVE-2021-21578
Published: 2021-08-03
Description: Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://www.dell.com/support/kbdoc/000189193; https://www.dell.com/support/kbdoc/000189193
CVE: CVE-2021-21579
Published: 2021-08-03
Description: Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601, CWE-601
References: https://www.dell.com/support/kbdoc/000189193; https://www.dell.com/support/kbdoc/000189193
CVE: CVE-2021-21580
Published: 2021-08-03
Description: Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized message on the application that can phish users into believing that the message is legitimate.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-74, CWE-74
References: https://www.dell.com/support/kbdoc/000189193; https://www.dell.com/support/kbdoc/000189193
CVE: CVE-2021-21581
Published: 2021-08-03
Description: Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a victim’s browser by tricking a victim in to following a specially crafted link.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://www.dell.com/support/kbdoc/000189193; https://www.dell.com/support/kbdoc/000189193
CVE: CVE-2021-31503
Published: 2021-08-03
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.3.84 (package 16.6.3.134). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of IGS files. The issue results from the lack of proper initialization of a pointer prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12690.
CVSS Score: 7.8 (HIGH)
CWE: CWE-824
References: https://www.zerodayinitiative.com/advisories/ZDI-21-645/; https://www.cvedetails.com/vulnerability-list/vendor_id-2032/product_id-96672/Opentext-Brava-Desktop.html?page=1&opec=1&order=1&trc=35&sha=37f4ed0596f8ccacca7d571f22a38c97b0f19f4c; https://www.opentext.com/products/brava
CVE: CVE-2021-31504
Published: 2021-08-03
Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of OpenText Brava! Desktop Build 16.6.3.84 (package 16.6.3.134). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of PDF files. The issue results from the lack of proper validation of a user-supplied value prior to dereferencing it as a pointer. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-12691.
CVSS Score: 7.8 (HIGH)
CWE: CWE-822
References: https://www.zerodayinitiative.com/advisories/ZDI-21-646/; https://www.cvedetails.com/vulnerability-list/vendor_id-2032/product_id-96672/Opentext-Brava-Desktop.html?page=1&opec=1&order=1&trc=35&sha=37f4ed0596f8ccacca7d571f22a38c97b0f19f4c; https://www.opentext.com/products/brava
CVE: CVE-2021-33485
Published: 2021-08-03
Description: CODESYS Control Runtime system before 3.5.17.10 has a Heap-based Buffer Overflow.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14805&token=f0b86f99bb302ddd4aadec483aed5f5d3fddbf1a&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14805&token=f0b86f99bb302ddd4aadec483aed5f5d3fddbf1a&download=
CVE: CVE-2021-33486
Published: 2021-08-03
Description: All versions of the CODESYS V3 Runtime Toolkit for VxWorks from version V3.5.8.0 and before version V3.5.17.10 have Improper Handling of Exceptional Conditions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14806&token=637e12e86301b83beac1653bd88da3aa5aa3f51b&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=14806&token=637e12e86301b83beac1653bd88da3aa5aa3f51b&download=
CVE: CVE-2021-36763
Published: 2021-08-03
Description: In CODESYS V3 web server before 3.5.17.10, files or directories are accessible to External Parties.
CVSS Score: 7.5 (HIGH)
CWE: CWE-552
References: https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16803&token=0b8edf9276dc39ee52f43026c415c5b38085d90a&download=; https://customers.codesys.com/index.php?eID=dumpFile&t=f&f=16803&token=0b8edf9276dc39ee52f43026c415c5b38085d90a&download=
CVE: CVE-2021-37556
Published: 2021-08-03
Description: A SQL injection vulnerability in reporting export in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the include/reporting/dashboard/csvExport/csv_HostGroupLogs.php start and end parameters.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/centreon/centreon/pull/9781; https://www.synacktiv.com/sites/default/files/2021-07/Centreon_Multiple_vulnerabilities_0.pdf; https://github.com/centreon/centreon/pull/9781
CVE: CVE-2021-37557
Published: 2021-08-03
Description: A SQL injection vulnerability in image generation in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote authenticated (but low-privileged) attackers to execute arbitrary SQL commands via the include/views/graphs/generateGraphs/generateImage.php index parameter.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/centreon/centreon/pull/9787; https://www.synacktiv.com/sites/default/files/2021-07/Centreon_Multiple_vulnerabilities_0.pdf; https://github.com/centreon/centreon/pull/9787
CVE: CVE-2021-37558
Published: 2021-08-03
Description: A SQL injection vulnerability in a MediaWiki script in Centreon before 20.04.14, 20.10.8, and 21.04.2 allows remote unauthenticated attackers to execute arbitrary SQL commands via the host_name and service_description parameters. The vulnerability can be exploited only when a valid Knowledge Base URL is configured on the Knowledge Base configuration page and points to a MediaWiki instance. This relates to the proxy feature in class/centreon-knowledge/ProceduresProxy.class.php and include/configuration/configKnowledge/proxy/proxy.php.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/centreon/centreon/pull/9796; https://www.synacktiv.com/sites/default/files/2021-07/Centreon_Multiple_vulnerabilities_0.pdf; https://github.com/centreon/centreon/pull/9796
CVE: CVE-2021-32017
Published: 2021-08-03
Description: An issue was discovered in JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permitted the listing of the content of the remote file system. This can be used to identify the complete server filesystem structure, i.e., identifying all the directories and files.
CVSS Score: 9.9 (CRITICAL)
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-32017; https://excellium-services.com/cert-xlm-advisory/cve-2021-32017/; https://excellium-services.com/cert-xlm-advisory/cve-2021-32017/
CVE: CVE-2021-32814
Published: 2021-08-03
Description: Skytable is a NoSQL database with automated snapshots and TLS. Versions prior to 0.5.1 are vulnerable to a a directory traversal attack enabling remotely connected clients to destroy and/or manipulate critical files on the host's file system. This security bug has been patched in version 0.5.1. There are no known workarounds aside from upgrading.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/skytable/skytable/blob/next/CHANGELOG.md#version-051-2021-03-17; https://github.com/skytable/skytable/commit/38b011273bb92b83c61053ae2fcd80aa9320315c#diff-1cdcf1a793c71ec658782437e4da7e3a37042bc1e2c12545942e9a14679c4b7e; https://github.com/skytable/skytable/security/advisories/GHSA-2hj9-cxmc-m4g7
CVE: CVE-2019-14453
Published: 2021-08-03
Description: An issue was discovered in Comelit "App lejos de casa (web)" 2.8.0. It allows privilege escalation via modified domus and logged fields, related to js/bridge.min.js and login.json. For example, an attacker can achieve high privileges (installer or administrator) for the graphical interface via a 1C000000000S value for domus, in conjunction with a zero value for logged.
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://www.blogx86.net/2021/07/26/cve-2019-14453/; https://www.blogx86.net/2021/07/26/cve-2019-14453/
CVE: CVE-2021-22416
Published: 2021-08-03
Description: A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution.
CVSS Score: 7.8 (HIGH)
References: https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]; https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]
CVE: CVE-2021-22417
Published: 2021-08-03
Description: A component of the HarmonyOS has a Data Processing Errors vulnerability. Local attackers may exploit this vulnerability to cause Kernel Memory Leakage.
CVSS Score: 5.5 (MEDIUM)
References: https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]; https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]
CVE: CVE-2021-22418
Published: 2021-08-03
Description: A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause memory overwriting.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]; https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]
CVE: CVE-2021-22419
Published: 2021-08-03
Description: A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to cause persistent dos.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-345
References: https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]; https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]
CVE: CVE-2021-22420
Published: 2021-08-03
Description: A component of the HarmonyOS has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause the underlying trust of the application trustlist mechanism is missing..
CVSS Score: 7.8 (HIGH)
CWE: CWE-668
References: https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]; https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]
CVE: CVE-2021-22421
Published: 2021-08-03
Description: A component of the HarmonyOS has a Improper Privilege Management vulnerability. Local attackers may exploit this vulnerability to cause further Elevation of Privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-269
References: https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]; https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]
CVE: CVE-2021-22422
Published: 2021-08-03
Description: A component of the HarmonyOS has a Integer Overflow or Wraparound vulnerability. Local attackers may exploit this vulnerability to cause memory overwriting.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190
References: https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]; https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]
CVE: CVE-2021-22423
Published: 2021-08-03
Description: A component of the HarmonyOS has a Out-of-bounds Write Vulnerability. Local attackers may exploit this vulnerability to cause integer overflow.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]; https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]
CVE: CVE-2021-22424
Published: 2021-08-03
Description: A component of the HarmonyOS has a Kernel Memory Leakage Vulnerability. Local attackers may exploit this vulnerability to cause Kernel Denial of Service.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-401
References: https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]; https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]
CVE: CVE-2021-22425
Published: 2021-08-03
Description: A component of the HarmonyOS has a Double Free vulnerability. Local attackers may exploit this vulnerability to cause Root Elevating Privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]; https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-[PII_REDACTED]
CVE: CVE-2021-27942
Published: 2021-08-03
Description: Vizio P65-F1 6.0.31.4-2 and E50x-E1 10.0.31.4-2 Smart TVs allow a threat actor to execute arbitrary code from a USB drive via the Smart Cast functionality, because files on the USB drive are effectively under the web root and can be executed.
CVSS Score: 6.8 (MEDIUM)
References: https://www.l9group.com/advisories/vizio-tv-code-execution-from-a-usb-drive; https://www.l9group.com/advisories/vizio-tv-code-execution-from-a-usb-drive
CVE: CVE-2021-32016
Published: 2021-08-03
Description: An issue was discovered in JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permitted the writing of arbitrary files to a user-controlled location on the remote filesystem (with user-controlled content) via directory traversal, potentially leading to remote code and command execution.
CVSS Score: 9.9 (CRITICAL)
CWE: CWE-22
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-32016; https://excellium-services.com/cert-xlm-advisory/cve-2021-32016/; https://excellium-services.com/cert-xlm-advisory/cve-2021-32016/
CVE: CVE-2021-32018
Published: 2021-08-03
Description: An issue was discovered in JUMP AMS 3.6.0.04.009-2487. The JUMP SOAP API was vulnerable to arbitrary file reading due to an improper limitation of file loading on the server filesystem, aka directory traversal.
CVSS Score: 8.5 (HIGH)
CWE: CWE-22
References: https://cds.thalesgroup.com/en/tcs-cert/CVE-2021-32018; https://excellium-services.com/cert-xlm-advisory/cve-2021-32018/; https://excellium-services.com/cert-xlm-advisory/cve-2021-32018/
CVE: CVE-2021-36622
Published: 2021-08-03
Description: Sourcecodester Online Covid Vaccination Scheduler System 1.0 is affected vulnerable to Arbitrary File Upload. The admin panel has an upload function of profile photo accessible at http://localhost/scheduler/admin/?page=user. An attacker could upload a malicious file such as shell.php with the Content-Type: image/png. Then, the attacker have to visit the uploaded profile photo to access the shell.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.exploit-db.com/exploits/50114; https://www.exploit-db.com/exploits/50114
CVE: CVE-2021-36623
Published: 2021-08-03
Description: Arbitrary File Upload in Sourcecodester Phone Shop Sales Management System 1.0 enables RCE.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://www.exploit-db.com/exploits/50106; https://www.exploit-db.com/exploits/50106
CVE: CVE-2021-36654
Published: 2021-08-03
Description: CMSuno 1.7 is vulnerable to an authenticated stored cross site scripting in modifying the filename parameter (tgo) while updating the theme.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/163737/CMSuno-1.7-Cross-Site-Scripting.html; https://github.com/boiteasite/cmsuno/issues/17; http://packetstormsecurity.com/files/163737/CMSuno-1.7-Cross-Site-Scripting.html
CVE: CVE-2021-30541
Published: 2021-08-03
Description: Use after free in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html; https://crbug.com/1214842; https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html
CVE: CVE-2021-30559
Published: 2021-08-03
Description: Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html; https://crbug.com/1219082; https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html
CVE: CVE-2021-30560
Published: 2021-08-03
Description: Use after free in Blink XSLT in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html; https://crbug.com/1219209; https://lists.debian.org/debian-lts-announce/2022/09/msg00010.html
CVE: CVE-2021-30561
Published: 2021-08-03
Description: Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843
References: http://packetstormsecurity.com/files/163835/Chrome-JS-WasmJs-InstallConditionalFeatures-Object-Corruption.html; https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html; https://crbug.com/1219630
CVE: CVE-2021-30562
Published: 2021-08-03
Description: Use after free in WebSerial in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html; https://crbug.com/1220078; https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html
CVE: CVE-2021-30563
Published: 2021-08-03
Description: Type Confusion in V8 in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-843, CWE-843
References: https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html; https://crbug.com/1228407; https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html
CVE: CVE-2021-30564
Published: 2021-08-03
Description: Heap buffer overflow in WebXR in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html; https://crbug.com/1221309; https://chromereleases.googleblog.com/2021/07/stable-channel-update-for-desktop.html
CVE: CVE-2021-32803
Published: 2021-08-03
Description: The npm package "tar" (aka node-tar) before versions 6.1.2, 5.0.7, 4.4.15, and 3.2.3 has an arbitrary File Creation/Overwrite vulnerability via insufficient symlink protection. `node-tar` aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieved by ensuring that extracted directories are not symlinks. Additionally, in order to prevent unnecessary `stat` calls to determine whether a given path is a directory, paths are cached when directories are created. This logic was insufficient when extracting tar files that contained both a directory and a symlink with the same name as the directory. This order of operations resulted in the directory being created and added to the `node-tar` directory cache. When a directory is present in the directory cache, subsequent calls to mkdir for that directory are skipped. However, this is also where `node-tar` checks for symlinks occur. By first creating a directory, and then replacing that directory with a symlink, it was thus possible to bypass `node-tar` symlink checks on directories, essentially allowing an untrusted tar file to symlink into an arbitrary location and subsequently extracting arbitrary files into that location, thus allowing arbitrary file creation and overwrite. This issue was addressed in releases 3.2.3, 4.4.15, 5.0.7 and 6.1.2.
CVSS Score: 8.2 (HIGH)
CWE: CWE-22, CWE-59
References: https://cert-portal.siemens.com/productcert/pdf/ssa-389290.pdf; https://github.com/npm/node-tar/commit/9dbdeb6df8e9dbd96fa9e84341b9d74734be6c20; https://github.com/npm/node-tar/security/advisories/GHSA-r628-mhmh-qjhw