CVE:CVE-2021-32804
CNNVD:CNNVD-202108-337
node-tar是一款用于文件压缩/解压缩的软件包。
node-tar 存在路径遍历漏洞，该漏洞源于绝对路径清理不足而具有任意文件创建/覆盖漏洞。
solution:Upgrade tar_project tar to a higher version than 3.2.2,4.4.14,5.0.6,6.1.1,and avoid the version (,3.2.2),[4.0.0,4.4.14),[5.0.0,5.0.6),[6.0.0,6.1.1); Upgrade oracle graalvm to a higher version than 20.3.3,21.2.0,and avoid the version 20.3.3,21.2.0; Upgrade siemens sinec_infrastructure_network_services to a higher version than 1.0.1.1,and avoid the version (,1.0.1.1)