CVE-2024-55587 PoC — python-libarchive 安全漏洞

Source

https://github.com/CSIRTTrizna/CVE-2024-55587

Associated Vulnerability

Title:python-libarchive 安全漏洞 (CVE-2024-55587)
Description:python-libarchive through 4.2.1 allows directory traversal (to create files) in extract in zip.py for ZipFile.extractall and ZipFile.extract.

Readme

# CVE-2024-55587
This repository is proof of concept for CVE-2024-55587 vulnerability in python library libarchive.
The generate_zip file creates malicious zip that will exploit u safe extraction of files in libarchive extractall method.
The vulnerable_zip is just an exaple of vulnerable code.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →