PT-2021-4597

CVE-2020-36193

·

Published

2021-01-18

·

Updated

2026-10-01

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Archive Tar versions 1.4.11 and earlier
Description The vulnerability in the Archive Tar library's Tar.php file is related to improper link resolution, allowing an attacker to impact data integrity through directory traversal due to inadequate checking of symbolic links.
Recommendations For Archive Tar versions 1.4.11 and earlier, update to version 1.4.13 to resolve the issue. As a temporary workaround, consider restricting write operations to prevent directory traversal until the update is applied.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-RPW6-9XFX-JVCX
ALSA-2022:6542
BIT-DRUPAL-2020-36193
CESA-2022_6542
CLEANSTART-2024-DI03393
DLA-2530-1
DLA-2621-1
DSA-4894-1
MGASA-2021-0060
OPENSUSE-SU-2021:1267-1
OPENSUSE-SU-2021_1267-1
OPENSUSE-SU-2021:2872-1
OPENSUSE-SU-2021_2872-1
OPENSUSE-SU-2021:3018-1
OPENSUSE-SU-2021_3018-1
RHSA-2022:6541
RHSA-2022:6542
RHSA-2022_6542
RHSA-2022:7340
RHSA-2022_7340
RLSA-2022:6542
SUSE-SU-2021:2926-1
SUSE-SU-2021_2926-1
SUSE-SU-2021:3006-1
SUSE-SU-2021_3006-1
SUSE-SU-2021:3018-1
SUSE-SU-2021_3018-1
USN-4723-1
Found an issue in the description? Have something to add? Feel free to write us 👾