CVE-2021-32814

Skytable is a NoSQL database with automated snapshots and TLS. Versions prior to 0.5.1 are vulnerable to a a directory traversal attack enabling remotely connected clients to destroy and/or manipulate critical files on the host's file system. This security bug has been patched in version 0.5.1. There are no known workarounds aside from upgrading.
Path Traversal
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
GitHub_MCNA
8.8 HIGH
NETWORK
LOW
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 71%
VendorProductVersion
skytableskytable
𝑥
< 0.5.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/skytable/skytable/blob/next/CHANGELOG.md#version-051-2021-03-17
https://github.com/skytable/skytable/commit/38b011273bb92b83c61053ae2fcd80aa9320315c#diff-1cdcf1a793c71ec658782437e4da7e3a37042bc1e2c12545942e9a14679c4b7e
https://github.com/skytable/skytable/security/advisories/GHSA-2hj9-cxmc-m4g7
https://security.skytable.io/ve/s/00001.html
https://github.com/skytable/skytable/blob/next/CHANGELOG.md#version-051-2021-03-17
https://github.com/skytable/skytable/commit/38b011273bb92b83c61053ae2fcd80aa9320315c#diff-1cdcf1a793c71ec658782437e4da7e3a37042bc1e2c12545942e9a14679c4b7e
https://github.com/skytable/skytable/security/advisories/GHSA-2hj9-cxmc-m4g7
https://security.skytable.io/ve/s/00001.html