CVE-2022-41352

This is a working exploit for CVE-2022-41352, an arbitrary file write vulnerability in Zimbra mail servers due to a vulnerable `cpio` version. The exploit crafts a malicious tar file to achieve unauthenticated remote code execution by writing a JSP webshell to the target server.

This PoC exploits CVE-2022-41352, a path traversal vulnerability in cpio, by crafting a malicious tar archive with a symlink that extracts files outside the intended directory. The script generates a tar file with a symlink pointing to a parent directory, demonstrating arbitrary file write capabilities.