Description
In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink and a regular file with the same name.
Remediation
References
Related Vulnerabilities
Next.js URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2021-37699)
WordPress Plugin 360 Product Rotation Cross-Site Scripting (1.4.7)
WordPress Plugin Admin username changer Unspecified Vulnerability (1.0)
phpMyAdmin Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-2505)
Oracle Application Server Other Vulnerability (CVE-2005-1383)