Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-42471 PoC — Arbitrary File Write via artifact extraction in actions/artifact

Source
https://github.com/theMcSam/CVE-2024-42471-PoC
Associated Vulnerability
Title:Arbitrary File Write via artifact extraction in actions/artifact (CVE-2024-42471)
Description:actions/artifact is the GitHub ToolKit for developing GitHub Actions. Versions of `actions/artifact` on the 2.x branch before 2.1.2 are vulnerable to arbitrary file write when using `downloadArtifactInternal`, `downloadArtifactPublic`, or `streamExtractExternal` for extracting a specifically crafted artifact that contains path traversal filenames. Users are advised to upgrade to version 2.1.2 or higher. There are no known workarounds for this issue.
Description
unzip-stream file write/overwrite vulnerability
Readme
# CVE-2024-42471-PoC
tar-fs file write/overwrite vulnerability
File Snapshot

 [4.0K]  /data/pocs/6e818b515144c0c6bc923104d769e1b10c5c571c
├── [1.2K]  exploit.py
└── [  63]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →