Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-12905 PoC — tar-fs 安全漏洞

Source
https://github.com/theMcSam/CVE-2024-12905-PoC
Associated Vulnerability
Title:tar-fs 安全漏洞 (CVE-2024-12905)
Description:An Improper Link Resolution Before File Access ("Link Following") and Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal"). This vulnerability occurs when extracting a maliciously crafted tar file, which can result in unauthorized file writes or overwrites outside the intended extraction directory. The issue is associated with index.js in the tar-fs package. This issue affects tar-fs: from 0.0.0 before 1.16.4, from 2.0.0 before 2.1.2, from 3.0.0 before 3.0.8.
Description
tar-fs file write/overwrite vulnerability
Readme
# CVE-2024-12905
tar-fs file write/overwrite vulnerability
File Snapshot

 [4.0K]  /data/pocs/d7b06634520c05601db8531488b10b493cd25b0f
├── [1.7K]  exploit.py
└── [  59]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →