CVE-2021-32814

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Skytable is a NoSQL database with automated snapshots and TLS. Versions prior to 0.5.1 are vulnerable to a a directory traversal attack enabling remotely connected clients to destroy and/or manipulate critical files on the host's file system. This security bug has been patched in version 0.5.1. There are no known workarounds aside from upgrading.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published: Aug 3, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-328155.5Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The assertion fai CVE-2021-328167.5ProtonMail Web Client is the official AngularJS web client for the ProtonMail secure email service. ProtonMail Web Client before version 3.1 CVE-2021-328176.8express-hbs is an Express handlebars template engine. express-hbs mixes pure template data with engine configuration options through the Exp CVE-2021-328185.4haml-coffee is a JavaScript templating solution. haml-coffee mixes pure template data with engine configuration options through the Express CVE-2021-328198.8Squirrelly is a template engine implemented in JavaScript that works out of the box with ExpressJS. Squirrelly mixes pure template data with CVE-2021-32827.5HashiCorp Vault Enterprise 1.6.0 & 1.6.1 allowed the `remove-peer` raft operator command to be executed against DR secondaries without authe CVE-2021-328208.6Express-handlebars is a Handlebars view engine for Express. Express-handlebars mixes pure template data with engine configuration options th CVE-2021-328217.5MooTools is a collection of JavaScript utilities for JavaScript developers. All known versions include a CSS selector parser that is vulnera CVE-2021-328225.3The npm hbs package is an Express view engine wrapper for Handlebars. Depending on usage, users of hbs may be vulnerable to a file disclosur CVE-2021-328233.7In the bindata RubyGem before version 2.4.10 there is a potential denial-of-service vulnerability. In affected versions it is very slow for CVE-2021-328249.8Apache Dubbo is a java based, open source RPC framework. Versions prior to 2.6.10 and 2.7.10 are vulnerable to pre-auth remote code executio CVE-2021-328259.1bblfshd is an open source self-hosted server for source code parsing. In bblfshd before commit 4265465b9b6fb5663c30ee43806126012066aad4 ther