CVE-2021-32708

CVE-2021-32708 is a high-severity remote code execution vulnerability affecting Flysystem, an open-source PHP file storage library, specifically versions 1.x and 2.x, and products like Fedora that use it. The flaw arises from improper unicode whitespace normalization, which, under specific conditions, allows an attacker to bypass extension deny-lists and upload malicious code. With a CVSS score of 8.1, exploitation requires high attack complexity but can lead to complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion, suggesting a low current threat landscape.