high7.5
CVE-2015-8860
The tar package before 2.0.0 for Node.js allows remote attackers to write to arbitrary files via a symlink attack in an archive.
Impact
The tar package before 2.0.0 for Node.js allows remote attackers to write to arbitrary files via a symlink attack in an archive.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nodejs | Node.Js | through 1.8.4 |