ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g., WordPress) run under the same user account. The attacker must be able to create a symlink inside the…

{
                    "defaultStatus": "unaffected",
                    "modules": [
                        "purge_all",
                        "partial/wildcard key purge",
                        "asynchronous purge queue",
                        "vary-aware variant deletion"
                    ],
                    "product": "ngx_cache_purge",
                    "programFiles": [
                        "ngx_cache_purge_module.c"
                    ],
                    "programRoutines": [
                        {
                            "name": "ngx_http_cache_purge_all"
                        },
                        {
                            "name": "ngx_http_cache_purge_partial"
                        },
                        {
                            "name": "ngx_http_cache_purge_process_queue"
                        },
                        {
                            "name": "ngx_http_cache_purge_delete_variants"
                        }
                    ],
                    "repo": "https://github.com/nginx-modules/ngx_cache_purge",
                    "vendor": "denji",
                    "versions": [
                        {
                            "lessThanOrEqual": "2.5.6",
                            "status": "affected",
                            "version": "2.4.0",
                            "versionType": "semver"
                        },
                        {
                            "lessThan": "3.0.4",
                            "status": "affected",
                            "version": "3.0.0",
                            "versionType": "semver"
                        }
                    ]
                }