CVE-2024-12905

This exploit leverages a symlink vulnerability in tar-fs 3.0.0 to achieve arbitrary file write/overwrite by creating a malicious tar archive. It requires two stages: first uploading a symlink archive, then uploading a content archive to overwrite the target file.

This PoC exploits a file write/overwrite vulnerability in tar-fs by creating a symlink and archiving it in a two-stage process to overwrite arbitrary files on the system. The exploit leverages the tar-fs library's handling of symlinks to achieve unauthorized file modification.